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EMBEDDED WEP S E RV E R 

COPYRIGHT NO TICE 

The tables attached to the disclosure of this patent contain material that is subject to 
copyright protection. The copyright owner has no objection to the facsimile reproduction by 
anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark 
Office patent file or records, but otherwise reserves all copyright rights whatsoever. 

T ABLES 

Table A is a functional specification of the Agranat Systems, Inc. Em Web™ product; and 
Table B is a source code listing in the C programming language of header files defining 

data structures representing an archive of content as used by the Em Web™ product. 

The noted tables are provided to show an example of a particular embodiment of the 

invention incorporating features thereof which are described in detail below. 

CROSS-REFERENCE TO RELATED APPLICATION 

Priority is claimed under 35 U.S.C. §1 19(e) to the inventors 1 Provisional U.S. Patent 
Application Serial No. 08/023,373, entitled EXTENDED LANGUAGE COMPILER AND RUN 
TIME SERVER, filed August 8, 1996, now pending. The inventors' above-identified provisional 
U.S. patent application is incorporated herein by reference. 

It Fid4 <?f the Invention 

The present invention relates generally to graphical user interfaces (GUIs), i.e. user 
interfaces in which information can be presented in both textual form and graphical form. More 
particularly, the invention relates to GUIs used to control, manage, configure, monitor and 
diagnose software and hardware applications, devices and equipment using a World-Wide- Web 
client/server communications model. Yet more particularly, the invention relates to methods and 
apparatus for developing and using such GUIs based on a World- Wide- Web client/server 
communications model. 
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2, Related Art 

Many modern communications, entertainment and other electronic devices require or 
could benefit from improved local or remote control, management, configuration, monitoring 
and diagnosing. It is common for such devices to be controlled by a software application 

5 program specifically written for each device. The design of such a device includes any hardware 
and operating environment software needed to support the application, which is then referred to 
as an embedded application, because it is embedded within the device. Embedded application 
programs are generally written in a high-level programming language such as C, C++, etc., 
referred to herein as a native application programming language. Other languages suitable to 

10 particular uses may also be employed. The application program communicates with users 
through a user interface, generally written in the same high-level language as the application. 

The representation of an application in a native application programming language is 
referred to as the application program source code. A corresponding representation which can be 
executed on a processor is referred to as an executable image. 

15 Before an application written in a high-level language can be executed it must be 

compiled and linked to transform the application source code into an executable image. A 
compiler receives as an input a file containing the application source code and produces as an 
output a file in a format referred to as object code. Finally, one or more object code files are 
linked to form the executable image. Linking resolves references an object module may make 

20 outside of that object module, such as addresses, symbols or functions defined elsewhere. 

Source code may also define arrangements by which data can be stored in memory and 
conveniently referred to symbolically. Such defined arrangements are referred to as data 
structures because they represent the physical arrangement of data within memory, i.e., the 
structure into which the data is organized. 

25 Most commonly, remote control, management, configuration, monitoring and diagnosing 

applications employ unique proprietary user interfaces integrated with the application software 
and embedded into the device. Frequently these user interfaces present and receive information 
in text form only. Moreover, they are not portable, generally being designed to operate on a 
specific platform, i.e., combination of hardware and software. The devices for which control, 

30 management, configuration and diagnosing are desired have only limited run-time resources 
available, such as memory and long-term storage space. Proprietary interfaces are frequently 
designed with such limitations to data presentation, data acquisition and portability because of 
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the development costs incurred in providing such features and in order to keep the size and run- 
time resource requirements of the user interface to a minimum. Since each user interface tends to 
be unique to the particular remote control, management, configuration, monitoring or diagnosing 
function desired, as well as unique to the operating system, application and hardware platform 

5 upon which these operations are performed, significant time and/or other resources may be 
expended in development. Graphics handling and portability have therefore been considered 
luxuries too expensive for most applications. 

However, as the range of products available requiring control, management, 
configuration, monitoring or diagnosing increase, such former luxuries as graphical presentation 

] 0 and portability of the interface from platform to platform have migrated from the category of 
luxuries to that of necessities. It is well known that information presented graphically is more 
quickly and easily assimilated than the same information presented as text. It is also well known 
that a consistent user interface presented by a variety of platforms is more likely to be understood 
and properly used than unique proprietary user interfaces presented by each individual platform. 

15 Therefore, portable GUIs with low run-time resource requirements are highly desirable. 

With the growing popularity and expansion of the Internet, one extremely popular public 
network for communications between computer systems, and development of the World-Wide- 
Web communication and presentation model, a new paradigm for communication of information 
has emerged. 

20 The World-Wide-Web and similar private architectures such as internal corporate LANs, 

provide a "web" of interconnected document objects. On the World- Wide- Web, these document 
objects are located on various sites on the global Internet. The World-Wide- Web is also 
described in "The World-Wide Web, " by T. Berners-Lee, R. Cailliau, A. Luotonen, H. F. 
Nielsen, and A. Secret, Communications of the ACM. 37 (8), pp. 76-82, August 1994, and in 

25 "World Wide Web: The Information Universe," by Berners-Lee, T., et al., in Electronic 

Networking: Research. Applications &IK* Policy, Vol 1, No. 2, Meckler, Westport, Conn., Spring 
1992. On the Internet, the World- Wide- Web is a collection of documents (i.e., content), client 
software (i.e., browsers) and server software (i.e., servers) which cooperate to present and receive 
information from users. The World-Wide- Web is also used to connect users through the content 
* 30 to a variety of databases and services from which information may be obtained. However, except 
as explained below, the World-Wide- Web is based principally on static information contained in 
the content documents available to the browsers through the servers. Such a limitation would 
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make the World- Wide- Web paradigm useless as a GUI which must present dynamic information 
generated by a device or application. 

The World-Wide- Web communications paradigm is based on a conventional client-server 
model. Content is held in documents accessible to servers. Clients can request, through an 
interconnect system, documents which are then served to the clients through the interconnect 
system. The client software is responsible for interpreting the contents of the document served, 
if necessary. 

Among the types of document objects in a "web" are documents and scripts. Documents 
in the World-Wide- Web may contain text, images, video, sound or other information sought to 
be presented, in undetermined formats known to browsers or extensions used with browsers. The 
presentation obtained or other actions performed when a browser requests a document from a 
server is usually determined by text contained in a document which is written in Hypertext Mark- 
up Language (HTML). HTML is described in Hypertext Markw Langvmge Specification - 2,Q, 
by T. Berners-Lee and D. Connolly, RFC 1866, proposed standard, November 1995, and in 
"World Wide Web & HTML," by Douglas C. McArthur, in Dr. Dobbs Journal . December 1994, 
pp. 18-20, 22, 24, 26 and 86. HTML documents stored as such are generally static, that is, the 
contents do not change over time except when the document is manually modified. Scripts are 
programs that can generate HTML documents when executed. 

HTML is one of a family of computer languages referred to as mark-up languages. 
Mark-up languages are computer languages which describe how to display, print, etc. a text 
document in a device-independent way. The description takes the form of textual tags indicating 
a format to be applied or other action to be taken relative to document text. The tags are usually 
unique character strings having defined meanings in the mark-up language. Tags are described 
in greater detail, below. 

HTML is used in the World-Wide-Web because it is designed for writing hypertext 
documents. The formal definition is that HTML documents are Standard Generalized Markup 
Language (SGML) documents that conform to a particular Document Type Definition (DTD). 
An HTML document includes a hierarchical set of markup elements, where most elements have 
a start tag, followed by content, followed by an end tag. The content is a combination of text and 
nested markup elements. Tags are enclosed in angle brackets ('<* and '>') and indicate how the 
document is structured and how to display the document, as well as destinations and labels for 
hypertext links. There are tags for markup elements such as titles, headers, text attributes such as 
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bold and italic, lists, paragraph boundaries, links to other documents or other parts of the same 
document, in-line graphic images, and many other features. 
For example, here are several lines of HTML : 

Some words are <B>bold<tfB>, others are <I>italic</I>. Here we start a new 
5 paragraph.<P>Here's a link to 

the <A HREF="http://www.agranat.com">Agranat Systems, Inc.</A> home 
page. 

This sample document is a hypertext document because it contains a "link" to another 
10 document, as provided by the "HREF= " The format of this link will be described below. A 
hypertext document may also have a link to other parts of the same document. Linked 
documents may generally be located anywhere on the Internet. When a user is viewing the 
document using a client program called a Web browser (described below), the links are displayed 
as highlighted words or phrases. For example, using a Web browser, the sample document above 
1 5 would be displayed on the user's screen as follows: 

Some words are bold, others are italic. Here we start a new paragraph. 
Here's a link to A granat Systems. Inc. home page. 
In the Web browser, the link may be selected, for example by clicking on the highlighted 
area with a mouse. Selecting a link will cause the associated document to be displayed. Thus, 
20 clicking on the highlighted text "Agranat Systems, Inc." would display that home page. 

Although a browser can be used to directly request images, video, sound, etc. from a 
server, more usually an HTML document which controls the presentation of information served 
to the browser by the server is requested. However, except as noted below, the contents of an 
HTML file are static, i.e., the browser can only present a passive snapshot of the contents at the 
25 time the document is served. In order to present dynamic information, i.e., generated by an 
application or device, or obtain from the user data which has been inserted into an HTML- 
generated form, conventional World-Wide- Web servers use a "raw" interface, such as the 
common gateway interface (CGI), explained below. HTML provides no mechanism for 
presenting dynamic information generated by an application or device, except through a raw 
30 interface, such as the CGL Regarding obtaining data from the user for use by the application or 
device, although standard HTML provides a set of tags which implement a convenient 
mechanism for serving interactive forms to the browser, complete with text fields, check boxes 
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and pull-down menus, the CGI must be used to process submitted forms. Form processing is 
important to remote control, management, configuration, monitoring and diagnosing applications 
because forms processing is a convenient way to configure an application according to user input 
using the World- Wide- Web communications model. But, form processing using a CGI is 
extremely complex, as will be seen below, requiring an application designer to learn and 
implement an unfamiliar interface. A CGI is therefore not a suitable interface for rapid 
development and prototyping of new GUI capabilities. Moreover, a developer must then master 
a native application source code language (e.g., C, C++, etc.), HTML and the CGI, in order to 
develop a complete application along with its user interface. 

Models of the World- Wide- Web communications paradigm for static content and 
dynamic content are shown in Figs. 14 and 15, respectively. As shown in Fig. 14, a browser 
1401 makes a connection 1402 with a server 1403, which serves static content 1405 from a 
storage device 1407 to the browser 1401 . In the case of dynamic content, shown in Fig. 1 5, the 
server 1403 passes control of the connection 1402 with the browser 1401 to an application 1501, 
through the CGI 1503. The application 1501 must maintain the connection 1402 with the 
browser 1401 and must pass control back to the server 1403 when service of the request which 
included dynamic content is complete. Furthermore, during service of a request which includes 
dynamic content, the application 1501 is responsible for functions normally performed by the 
server 1 403 , including maintaining the connection 1 402 with the browser 1401, generating 
headers in the server/browser transport protocol, generating all of the static and dynamic content 
elements, and parsing any form data returned by the user. Since use of the CGI 1 503 or other 
raw interface forces the application designer to do all of this work, applications 1501 to which 
forms are submitted are necessarily complex. 

In order to provide dynamic content to a browser, the World- Wide- Web has also evolved 
to include Java and other client side scripting languages, as well as some server side scripting 
languages. However, these languages are interpreted by an interpreter built into the browser 
1401 or server 1403, slowing down the presentation of information so generated. In the case of 
client side scripting, the script does not have any direct access to the application or to application 
specific information. Therefore, in order to generate or receive application specific information 
using client side scripting, the CGI 1 503 or other raw interface must still be used. In the case of 
server side scripting, the server 1403 must parse the content as it is served, looking for a script to 
be interpreted. The access which a script has to the application is limited by the definition of the 



WO 98/06033 PCT/US97/13817 

-7- 

scripting language, rather than by an application software interface designed by the application 
designer. 

A server side script is an executable program, or a set of commands stored in a file, that 
can be run by a server program to produce an HTML document that is then returned to the Web 

5 browser. Typical script actions include running library routines or other applications to get 
information from a file, a database or a device, or initiating a request to get information from 
another machine, or retrieving a document corresponding to a selected hypertext link. A script 
may be run on the Web server when, for example, the end user selects a particular hypertext link 
in the Web browser, or submits an HTML form request. Scripts are usually written in an 

10 interpreted language such as Basic, Practical Extraction and Report Language (Perl) or Tool 
Control Language (Tel) or one of the Unix operating system shell languages, but they also may 
be written in programming languages such as the "C" programming language and then compiled 
into an executable program. Programming in Tel is described in more detail in Tel and the Tk 
iQGlkil, by John K. Ousterhout, Addison- Wesley, Reading, MA, USA, 1994. Perl is described 

15 in more detail in Programming Perl , by Larry Wall and Randal L. Schwartz, O'Reilly & 
Associates, Inc., Sebastopol, CA, USA, 1992. 

Each document object in a web has an identifier called a Universal Resource Identifier 
(URI). These identifiers are described in more detail in T. Berners-Lee, "Universal Resource 
Identifiers in World-Wide- Web: A Unifying Syntax for the Expression of Names and Addresses 

20 of Objects on the Network as used in the World-Wide Web ." RFC 1630, CERN, June 1994; and 
T. Berners-Lee, L. Masinter, and M. McCahill, " Uniform Resource Locators (URLV 1 RFC 1738, 
CERN, Xerox PARC, University of Minnesota, December 1994. A URI allows any object on 
the Internet to be referred to by name or address, such as in a link in an HTML document as 
shown above. There are two types of URIs: a Universal Resource Name (URN) and a Uniform 

25 Resource Locator (URL). A URN references an object by name within a given name space. The 
Internet community has not yet fully defined the syntax and usage of URNs. A URL references 
an object by defining an access algorithm using network protocols. An example URL is 
n http://www.agranat.com M A URL has the syntax "scheme: scheme_specific_components" where 
"scheme" identifies the access protocol (such as HTTP, FTP or GOPHER). For a 
" 30 scheme of HTTP, the URL may be of the form "http://host:port/path?search n 

where 

"host" is the Internet domain name of the machine that supports the protocol; 



WO 98/06033 PCT/US97/13817 

-8- 

u port" is the transmission control protocol (TCP) port number of the appropriate 
server (if different from the default); 
"path" is a scheme-specific identification of the object; and 
"search" contains optional parameters for querying the content of the object. 
5 URLs are also used by web servers and browsers on private computer systems or networks and 
not just the World- Wide- Web. 

A site, i.e. an organization having a computer connected to a network, that wishes to 
make documents available to network users is called a "Web site" and must run a "Web server" 
program to provide access to the documents. A Web server program is a computer program that 
1 0 allows a computer on the network to make documents available to the rest of the World-Wide- 
Web or a private web. The documents are often hypertext documents in the HTML language, 
but may be other types of document objects as well, as well as images, audio and video 
information. The information that is managed by the Web server includes hypertext documents 
that are stored on the server or are dynamically generated by scripts on the Web server. Several 
15 Web server software packages exist, such as the Conseil Europeen pour la Recherche Nucleaire 
(CERN, the European Laboratory for Particle Physics) server or the National Center for 
Supercomputing Applications (NCSA) server. Web servers have been implemented for several 
different platforms, including the Sun Sparc 1 1 workstation running the Unix operating system, 
and personal computers with the Intel Pentium processor running the Microsoft® MS-DOS 
20 operating system and the Microsoft® Windows™ operating environment. 

Web servers also have a standard interface for running external programs, called the 
Common Gateway Interface (CGI). CGI is described in more detail in How To Set Up And 
Maintain A Web Site , by Lincoln D. Stein, Addison- Wesley, August 1995. A gateway is a 
program that handles incoming information requests and returns the appropriate document or 
25 generates a document dynamically. For example, a gateway might receive queries, look up the 
answer in an SQL database, and translate the response into a page of HTML so that the server 
can send the result to the client. A gateway program may be written in a language such as "C" or 
in a scripting language such as Perl or Tel or one of the Unix operating system shell languages. 
The CGI standard specifies how the script or application receives input and parameters, and 
30 specifies how any output should be formatted and returned to the server. 

A user (typically using a machine other than the machine used by the Web server) that 
wishes to access documents available on the network at a Web site must run a client program 
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called a "Web browser." The browser program allows the user to retrieve and display documents 
from Web servers. Some of the popular Web browser programs are: the Navigator browser from 
NetScape Communications Corp., of Mountain View, California; the Mosaic browser from the 
National Center for Supercomputing Applications (NCSA); the Win Web browser, from 
5 Microelectronics and Computer Technology Corp. of Austin, Texas; and the Internet Explorer, 
from Microsoft Corporation of Redmond, Washington. Browsers exist for many platforms, 
including personal computers with the Intel Pentium processor running the Microsoft® MS-DOS 
operating system and the Microsoft® Windows™ environment, and Apple Macintosh personal 
computers. 

10 The Web server and the Web browser communicate using the Hypertext Transfer 

Protocol (HTTP) message protocol and the underlying transmission control protocol/internet 
protocol (TCP/IP) data transport protocol of the Internet. HTTP is described in Hypertext 
Transfer Protocol - HTTP/1 .0 . by T. Berners-Lee, R. T. Fielding, H. Frystyk Nielsen, Internet 
Draft Document, October 14, 1995, and is currently in the standardization process. At this 

1 5 writing, the latest version is found in RFC Z068 which is a draft definition of HTTP/L 1 . In 
HTTP, the Web browser establishes a connection to a Web server and sends an HTTP request 
message to the server. In response to an HTTP request message, the Web server checks for 
authorization, performs any requested action and returns an HTTP response message containing 
an HTML document resulting from the requested action, or an error message. The returned 

20 HTML document may simply be a file stored on the Web server, or it may be created 

dynamically using a script called in response to the HTTP request message. For instance, to 
retrieve a document, a Web browser sends an HTTP request message to the indicated Web 
server, requesting a document by its URL. The Web server then retrieves the document and 
returns it in an HTTP response message to the Web browser. If the document has hypertext 

25 links, then the user may again select a link to request that a new document be retrieved and 
displayed. As another example, a user may fill in a form requesting a database search, the Web 
browser will send an HTTP request message to the Web server including the name of the 
database to be searched and the search parameters and the URL of the search script. The Web 
server calls a program or script, passing in the search parameters. The program examines the 
" 30 parameters and attempts to answer the query, perhaps by sending a query to a database interface. 
When the program receives the results of the query, it constructs an HTML document that is 
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returned to the Web server, which then sends it to the Web browser in an HTTP response 
message. 

Request messages in HTTP contain a "method name" indicating the type of action to be 
performed by the server, a URL indicating a target object (either document or script) oh the Web 

5 server, and other control information. Response messages contain a status line, server 

information, and possible data content. The Multipurpose Internet Mail Extensions (MIME) are 
a standardized way for describing the content of messages that are passed over a network. HTTP 
request and response messages use MIME header lines to indicate the format of the message. 
MIME is described in more detail in MIME (Multipurpose In ternet Mail Extensions): 

! o Mechanisms for Specifying and Describing the Format of Internet Message Bodies. Internet RFC 
1341, June 1992. 

The request methods defined in the HTTP/1 . 1 protocol include GET, POST, PUT, 
HEAD, DELETE, LINK, and UNLINK. PUT, DELETE, LINK and UNLINK are less 
commonly used. The request methods expected to be defined in the final version of the 

1 5 HTTP/1 . 1 protocol include GET, POST, PUT, HEAD, DELETE, OPTIONS and TRACE. 
DELETE, PUT, OPTIONS and TRACE are expected to be less commonly used. All of the 
methods are described in more detail in the HTTP/1 .0 and HTTP/1 . 1 specifications cited above. 

Finally, a device or application using conventional World- Wide- Web technology must 
have access to a server. Conventional servers are large software packages which run on 

20 relatively large, resource-rich computer systems. These systems are resource-rich in terms of 
processing speed and power, long-term storage capacity, short-term storage capacity and 
operating system facilities. Conventional servers take advantage of these resources, for example, 
in how they store content source documents. For high-speed, convenient access to content, it is 
conventionally stored in a directory tree of bulky ASCII text files. Therefore, conventional 

25 World-Wide- Web technology cannot be used to implement a GUI in a relatively small, 
inexpensive, resource-poor device or application. 

The combination of the Web server and Web browser communicating using an HTTP 
protocol over a computer network is referred to herein as the World-Wide- Web communications 
paradigm. 
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SU MMARY OF THE INVE NT IO N 

It is therefore an object of the present invention to provide an improved graphical user 
interface (GUI) for use in connection with remote control, management, configuration, 
monitoring and diagnosing functions embedded in applications, devices and equipment. 
5 According to one aspect of the invention, there is provided a method for providing a 

graphical user interface having dynamic elements. The method begins by defining elements of 
the graphical user interface in at least one text document written in a mark-up language. Next, 
the method defines including at a location in the document a code tag containing a segment of 
application source code. The text document is then served to a client which interprets the mark- 
10 up language; and when the location is encountered, the client is served a sequence of characters 
derived from a result of executing a sequence of instructions represented by the segment of 
application source code. An embodiment of code tags illustrating their use is described in detail, 
later. 

According to another aspect of the invention, there is another method for providing a 

15 graphical user interface having dynamic elements. This method also defines elements of the 
graphical user interface in at least one text document written in a mark-up language. Included in 
the document is a string identified by prototype tags. The text document is served to a 
prototyping client which interprets the mark-up language but does not recognize and does not 
display the prototype tag, but does display the string. An embodiment of prototype tags 

20 illustrating their use is described in detail, later. 

According to yet another aspect of the invention, there is yet another method for 
providing a graphical user interface having dynamic elements. Elements of the graphical user 
interface are defined in at least one text document written in a mark-up language. Included at a 
location in the document is a code tag containing a segment of application source code. Also 

25 included in the document is a string identified by prototype tags. The text document is compiled 
into a content source, which is subsequently decompiled into a replica of the text document. The 
replica of the text document is served to a client which interprets the mark-up language; and 
when the location is encountered in the replica, the client is served a character stream generated 
by executing the segment of application source code. 

30 Yet another aspect of the invention is a software product recorded on a medium. The 

software product includes a mark-up language compiler which can compile a mark-up language 
document into a data structure in a native application programming language, the compiler 
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recognizing one or more code tags which designate included text as a segment of application 
source code to be saved in a file for compilation by a compiler of the native application 
programming language. 

Another aspect of the invention is a method for providing a graphical user interface 

5 having displayed forms for entry of data. The steps of this method include defining elements of 
the graphical user interface in at least one text document written in a mark-up language; naming 
in the document a data item requested of a user and used by an application written in a native 
application programming language; and compiling the text document into a content source 
including a data structure definition in the native application programming language for the 

10 named data item. 

Yet another aspect of the invention may be practiced in a computer-based apparatus for 
developing a graphical user interface for an application, the apparatus including an editor which 
can manipulate a document written in a mark-up language and a viewer which can display a 
document written in the mark-up language. The apparatus further includes a mark-up language 

15 compiler which recognizes a code tag containing a source code fragment in a native application 
source code language, the code tag not otherwise part of the mark-up language, the compiler 
producing as an output a representation in the native application source code language of the 
document, including a copy of the source code fragment. 

In accordance with another aspect of the invention, there is a method for developing and 

20 prototyping graphic user interfaces for an application. The method includes accessing an HTML 
file, encapsulating portions of said HTML and entering source code therein, producing a source 
module from said HTML with encapsulated portions, producing source code for a server, and 
cross compiling and linking said application, said source code module and said server thereby 
producing executable object code. 

25 The invention, according to another aspect thereof, may be a data structure fixed in a 

computer readable medium, the data structure for use in a computer system including a client and 
a server in communication with each other. The data structure includes cross-compiled, stored 
and linked, HTML files with encapsulated portions containing executable code associated with 
said application, server code, and application code, wherein said executable code is run when the 

30 HTML file is served thereby providing real time dynamic data associated with said application. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

In the drawings, in which like reference numerals denote like elements: 
Fig. 1 is a block diagram of that aspect of the invention relating to development systems; 
Fig. 2 is a block diagram of that aspect of the invention relating to an embedded system; 
Fig. 3 is an HTML text fragment illustrating the use of an EMWEB_STRING tag; 
Fig. 4 is another HTML text fragment illustrating another use of an EM WEBSTRING 

Fig. 5 is an HTML text fragment illustrating the use of an EMWEB JNCLUDE tag; 
Fig. 6 is another HTML text fragment illustrating another use of an EMWEBINCLUDE 

Fig. 7 is an HTML text fragment showing a use of the EMWEB ITERATE attribute in 
connection with an EMWEB_STRING tag; 

Fig. 8 is an HTML text fragment showing a use of the EM WEBJTERATE attribute in 
connection with an EMWEBJNCLUDE tag; 
15 Fig. 9 is an example of forms processing showing the relationship between the HTML 

source code for the form and the form output produced; 

Fig. 10 is a block diagram of the data structure which defines the header for the data.dat 
archive file; 

Fig. 1 1 is a state diagram of an embedded system illustrating dynamic content processing; 
20 Fig. 12 is a state diagram of an embedded system illustrating forms processing; 

Fig. 13 is a state diagram of an embedded system illustrating suspend/resume processing; 

Fig. 14 is a block diagram illustrating conventional World-Wide- Web communication of 
static content between a server and a client; and 

Fig. 15 is a block diagram illustrating conventional World- Wide- Web communication of 
25 dynamic content between a server and a client. 

DETAILED DESCRIPTION 

The present invention will be better understood upon reading the following detailed 
description in connection with the figures to which it refers. 
' 30 Embodiments of various aspects of the invention are now described. First, a development 

environment is described in which application development and graphical user interface 
development are closely linked, yet require a low level of complexity compared to conventional 



5 

tag; 



10 tag; 
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development of an application and GUI. Second, an operating environment is described in which 
the application, a server and GUI are tightly coupled, compact and flexible. In the described 
system a GUI having portability, low run-time resource requirements and using any of a wide 
variety of systems available to a user as a universal front end, i.e. the point of contact with the 
5 user is software with which the user is already familiar. 

Development Environment 

Fig. 1 illustrates a development environment according to one aspect of the invention. 
Not all components of the environment are shown, but those shown are identified in the 

10 following discussion. 

Conventionally, an application development environment may include a source code 
editor, a compiler 101, a linker and a run-time environment in which to test and debug the 
application. It is expected that development environments in accordance with the invention 
include those components of a conventional development environment which a developer may 

1 5 find useful for developing an application. In the case of embedded applications, i.e., applications 
included within a device or larger application, the run-time environment includes the device or 
application in which the application is embedded, or a simulation or emulation thereof. 

The compiler 101 takes source code 103 generated using the source code editor or from 
other sources and produces object code 105, which is later linked to form the executable image. 

20 In addition to the conventional elements noted above, the described embodiment of a 

development environment according to the invention includes an HTML compiler 107 whose 
output 109 is in the source code language of the application under development. In addition, the 
development environment may include an HTML editor, an HTTP-compatible server for 
communicating with client software, i.e., browsers, and an HTTP-compatible browser. 

25 The HTML editor is used to create and edit HTML documents 1 1 1 which define the look 

and feel of a GUI for the application. Numerous tools are now available for performing this task 
while requiring a minimal knowledge or no knowledge of HTML, for example, Microsoft® Front 
Page™. It is preferred that the HTML editor used permit entry of non-standard tags into the 
HTML document. 

30 As will be seen in further detail, below, the server and browser are used to test a 

prototype GUI before it is fully integrated with the application or in the absence of the 
application. The browser should be capable of making a connection with the server using, for 
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example, a conventional connection protocol such as TCP/IP, as shown and described above in 
connection with Fig. 14. Other protocols or direct connections can also be used, as would be 
understood by those skilled in this art. While the browser and the server may be connected 
through a network such as the Internet, they need not be. For example, the server and client may 
5 run and connect on a single computer system. 

Application development proceeds substantially in a conventional manner as known to 
software developers. The application development should include the design of a software 
interface through which data will be communicated into and out of the application. However, the 
software interface is not a GUI. Rather, the interface merely defines how other software can 

1 0 communicate with the application. For example, the interface may be a collection of function 
calls and global symbols which other software can use to communicate with the application. The 
application should be written in a high level language such as C, C++, etc. The application can 
be tested by compiling and linking it with prototype code that provides or receives information 
through the software interface, exercising those features of the application. 

15 Meanwhile, a GUI for the application is designed as follows. The look and feel of the 

GUI are developed using the HTML editor, server and browser to create a set of content source 
documents 1 1 1 including at least one HTML document, which together define the look and feel 
of the GUI. This aspect of GUI development is conventional, proceeding as though the 
developer were developing a World-Wide- Web site. 

20 At locations in one or more HTML documents where data obtained from the application 

is to be displayed, the author includes special tags, explained further below, which allow the 
HTML document to obtain from the application the required data, using the application software 
interface. 

The content source documents 1 1 1 are stored conventionally in the form of one or more 
25 directory trees 113. The directory tree 1 1 3 containing the content which defines the GUI is then 
compiled using the HTML compiler 107, to produce an application source code language output 
109 representing the content source documents in the directory tree. The source code elements 
109 produced from the content source documents 111 in the directory tree 113, source code for 
an HTTP compatible server (not shown) and the application source code 103 are compiled into 
" 30 object code 1 05 and linked to form an executable image. The server may be supplied in the form 
of an object code library, ready for linking into the finished executable image. The executable 
image thus formed fully integrates the graphical user interface defined using familiar tools of 
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World- Wide- Web content development with the control and other functions defined using 
conventional application development tools. 

In order to successfully perform the integration described above, the HTML compiler 107 
of the described embodiment of the invention, the EmWeb™/compiler 107, recognizes a number 

5 of special extensions to HTML. The HTML extensions implemented by the EmWeb™/compiler 
107, embodying aspects of the invention are described in detail in Table A, Section 3.2. Several 
of these extensions are described briefly here, to aid in understanding the invention. 

The EMWEB_STRING tag is an extension of HTML used to encapsulate a fragment of 
source code in the HTML document. The source code will be executed by a system in which the 

10 application is embedded when the document is served to a browser (usually running on another 
system) and the location of the EMWEBJSTRING tag is reached. The source code returns a 
character string that is inserted as is into the document at the location of the EMWEB_STRJNG 
tag. Examples of the use of the EMWEBJ5TRING tag are shown in Figs. 3 and 4. 

In the example of Fig. 3, the EMWEB_STRING tag 301 first defines using "C=" a 

15 boundary character 303 used to define the end 305 of the included source code. Immediately 
following the boundary character definition is a fragment of C code 307 which returns a pointer 
to a string representing one of three fax states. When served by an embedded application, this 
example HTML produces the text "NetFax State:" followed by "Sending", "Receiving" or "Idle", 
depending on the value of the symbol GlobalFaxState. 

20 The example of Fig. 4 shows the use of EMWEBJ5TRING to output typed data whose 

type is defined by an attribute, EMWEB JTYPE 401 . The EmWeb™/compiler uses this attribute 
401 to produce a source code output routine which converts the typed data found at the address 
returned 403 into a string for serving at the proper location in the document. 

A similar function is performed by the HTML extension, the EMWEBINCLUDE tag. 

25 Using this tag, standard parts of a GUI such as headers and footers common to multiple pages or 
windows of information need only be stored once. Header and footer files are referred to using 
the EMWEB INCLUDE tag which inserts them at the location in each HTML content document 
where the tag is placed. In the described embodiment of the invention, the contents of the 
EMWEBJNCLUDE tag must resolve to a relative or absolute path name within the local 

30 directory tree of content. This can be done by specifying a local Universal Resource Locator 
(URL), which is how resources are located in the World-Wide- Web communications paradigm, 
or by including source code which returns a string representing such a local URL. An absolute 
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local URL takes the form "/path/filename", where "/path" is the full path from the root of the 
directory tree to the directory in which the file is located. A relative URL defines the location of 
a file relative to the directory in which the current, i.e., base, document is located and takes the 
form "path/filename". While the described embodiment requires resolution of the 
5 EMWEBINCLUDE tag to a local URL, the invention is not so limited. In alternate 
embodiments, local and external URLs may be permitted or other limitations imposed. 
Examples of the use of the EMWEB INCLUDE tag are shown in Figs. 5 and 6. 

In the example of Fig. 5, a COMPONENT attribute 501 in an EMWEBJNCLUDE tag 
simply defines a local URL 503. 

10 In the more elaborate example of Fig. 6, a fragment of source code 601 which produces a 

local URL 603 upon a defined condition 605 is used to generate a local URL at run time. 

The results to be returned by an EMWEB_STRING or EMWEBJNCLUDE tag can also 
be built up iteratively using repeated calls to the included source code. This is done using the 
EMWEBJTERATE attribute, yet another extension to HTML. Examples of the use of 

1 5 EMWEBJTERATE are shown in Figs. 7 and 8. 

Fig. 7 shows an example of the EMWEBJTERATE attribute 701 used in connection 
with the EMWEB STRING tag 703. The fragment of code 705 is executed repeatedly until a 
NULL is returned. Thus, this HTML repeatedly executes the C source code fragment to display 
the tray status of all trays in a system. 

20 Similarly, in Fig. 8, EMWEBJNCLUDE 801 and EMWEBJTERATE 803 are used to 

build a table of features for which content from other URLs 805 are to be displayed. When the 
table is complete, a NULL is returned 807, terminating the iterations. 

Since the extensions to HTML described above allow the encapsulation of source code 
within an HTML document a mechanism with which to provide the encapsulated source code 

25 with required global definitions, header files, external declarations, etc. is also provided in the 
form of an EMWEB JiEAD tag. The EMWEB JIEAD tag specifies a source code component 
to be inserted in the source code output of the EmWeb™/compiler, outside of any defined 
function. Although it is preferred that the EMWEB JIEAD tag appears in the HTML file 
header, it may appear anywhere. The code generated by an EMWEB JIEAD tag is placed before 

30 any functions or other code defined within the HTML content source documents. 

As indicated above, the GUI may be prototyped using a conventional server and browser 
(see Fig. 14) to preview the HTML documents comprising the GUI. Therefore, it may be useful 
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to provide static content with which to preview the page, at locations where dynamic content will 
appear during use, but which does not appear in the compiled document. For example, it may be 
useful to include a prototyping value for content which is otherwise provided using the 
EMWEBSTRING tag mechanism. Therefore, another extension to HTML recognized by the 

5 EmWeb™/compiler is the EM WEB_PROTO begin 309 and end 3 11 tags, as shown in Fig. 3 . 
The EmWeb™/compiler removes these tags and everything between them when compiling the 
document, but the tags are ignored and the text between them is interpreted normally by a 
conventional browser viewing the HTML document either directly or via a conventional server. 
Conventional browsers recognize the tag due to its special syntax, e.g., being enclosed in "<" and 

10 but are designed to ignore and not display any tag for which the browser does not have a 

definition. All EmWeb™/compiler HTML extensions are thus skipped over by conventional 
browsers. Thus, in the example of Fig. 3, the prototype page displays "NetFax State: Sending". 
Fig. 4 shows a similar use of EMWEB_PROTO tags. 

Handling of HTML forms by the EmWeb™/compiler is now described in connection 

15 with Fig. 9. As seen in Fig. 9, an HTML form is defined substantially conventionally. Names 
used in the form are used in constructing symbol names used in the output source code produced 
by the EmWeb™/compiler. Therefore names should be valid symbol names in the source code 
language. 

Each element of a form definition is translated by the EmWeb™/compiler into a part of a 
20 corresponding data structure defined for that form. Forms data is moved into and out of the 
application by changing values of items in the data structure. 

Turning now to the example in Fig. 9, the relationship between the illustrated HTML 
form definition and the corresponding data structure is described. The form is given a unique 
name, using an EMWEBNAME attribute in a FORM tag. The form name becomes part of the 
25 structure name, for easy reference and uniqueness. The form name will also be used to generate 
function names for functions which are called when the form is served and when the form is 
submitted. 

The structure generated is itself composed of two structures. The first holds values of 
each dynamic element of the form. The second holds a status flag indicating the status of the 
30 contents of a corresponding value. Thus, in the example of Fig. 9, a structure to hold values and 
status for the sysName INPUT and the Logging SELECTion is created. The value of sysName is 
a character string, while Logging is an enumerated type. 
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Two function prototypes are also generated. The actions to be performed by these 
functions must be defined by the developer. The Serve function is called when the form is 
served and can be used to supply default values, for example. The Submit function is called 
when the form is submitted, to update values in the data structure, for example. 
5 Currently, EmWeb™/compiler supports TEXT, PASSWORD, CHECKBOX, RADIO, 

IMAGE, HIDDEN, SUBMIT, RESET, SELECT and OPTION input fields. For detailed 
descriptions, see Table A, Section 3.2.5. In addition, the EmWeb™/compiler supports "typing" 
of TEXT input field data. That is, the EMWEBJTYPE attribute may be used to define a TEXT 
input field to contain various kinds of integers, a dotted IP address (i.e., an address of the form 

l o 000.000.000.000), various other address formats, etc. A mapping of EMWEBJTYPE values to 
C language types is formed in the table in Table A, Section 3.2.5.3. 

The EmWeb™/compiler has been described in terms of a generic application source code 
language. The current commercial embodiment of the EmWeb™/compiler assumes the 
application source code language to be C or a superset thereof, e.g., C++. However, the 

1 5 functionality described can be generalized to any application source code language which may be 
preferred for a particular application purpose. However, in order to more fully understand how 
the EmWeb™/compiler and HTML extensions described above cooperate to permit integration 
of an HTML defined GUI with an application defined in an application source code, it will be 
assumed, without loss of generality, that the application source code language is C or a superset 

20 thereof. 

The EmWeb™/compiler produces a set of output files including a data.dat file containing 
the fixed data of a content archive, a code.c file containing the generated source code portions of 
an archive including portions defined in EMWEBSTRING, EMWEB JNCLUDE and 
EMWEB_HEAD tags and other source code generated by the EmWeb™/compiler, as well as 
25 proto.h and stubs.c files containing the definitions of C functions used for forms processing. The 
structure of these files is now described in connection with the data structure illustrated in Fig. 
10. 

The content archive file data.dat has a header structure as illustrated in Fig. 10. The data 
structure is accessed through an archive header 1001 which is a table of offsets or pointers to 
* 30 other parts of the archive. For example, there is a pointer 1001 a to a compression dictionary 
1003 for archives which include compressed documents. There is also a pointer 1001b to a 
linked list of document headers 1005, 1007 and 1009. Each document header 1005, 1007 and 
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1009 is a table of offsets or pointers to various components of the document. For example, the 
document header includes a pointer 1 005a to the URL 1 01 1 to which the document corresponds. 
There is also a pointer 1005b to a field 1013 giving the Multipurpose Internet Mail Extension 
(MIME) type of the document. There are pointers 1005c and 1005d respectively to header nodes 
5 1015 and document nodes 1017, explained further below. Finally, there is a pointer 1 005e to a 
block of static compressed or uncompressed data 1019 representing the static portions of the 
document. 

The static data does not include any Em Web™ tags, i.e., the extensions to HTML 
discussed above and defined in detail in Table A. Rather, information concerning any Em Web™ 

10 tags used in the document appears in the document nodes structure. 

Each Em Web™ tag employed in a document is represented in that document's document 
nodes structure as follows. The location of the Em Web™ tag within an uncompressed data 
block or an uncompressed copy of a compressed data block is represented by an offset 1 0 1 7a 
relative to the uncompressed data. The type of tag is indicated by a type flag 1017b. A node 

15 may include a flag which indicates any attributes associated with the tag represented. For 

example, a node for a tag of type EM WEB_STRING may include a flag indicating the attribute 
EMWEBJTERATE. Finally, nodes include an index 1017c. In nodes defining form elements, 
the index holds a form number and element number uniquely identifying the element and form 
within the document. In nodes defining EM WEB_STRING tags, the index is a reference to the 

20 instance of source code which should be executed at that point. As such, the index may be 
evaluated in an expression of a "switch" statement in C, where each controlled statement of the 
"switch" statement is one source code fragment from one EMWEB_STRING instance. 
Alternatively, the index may be a pointer or index into a table of source code fragments from 
EMWEBSTRING tags, which have been encapsulated as private functions. 

25 The data structure defined above provides a convenient way of transferring control as a 

document containing dynamic content is served. When a document is requested, the list of 
document nodes is obtained, to determine at what points control must be transferred to code 
segments which had been defined in the HTML source document. The document is then served 
using the data block defining the static elements of the document, until each document node is 

30 encountered. When each document node is encountered, control is transferred to the appropriate 
code segment. After the code segment completes execution, the static content which follows is 
served until the offset of the next document node is encountered. 
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Header nodes permit the storage of document meta information, not otherwise handled, 
such as content language, e.g., English, German, etc., cookie control, cache control or an e-tag 
giving a unique version number for a document, for example a 30-bit CRC value computed for 
the document. By avoiding having to put this information in the header of each document, 
5 significant space can be saved in the archive because not all documents require this information. 
Therefore, header nodes need only be stored for documents using this information. 

The data structure which represents the archive of content used by the 
EmWeb™/compiler embodiment of the invention is defined by the C source code contained in 
Table B. 

10 

RmHime Environment 

Aspects of the invention related to the run-time environment and server are embodied in 
the Em Web™/server as described in detail in Table A, Section 4. 

To a conventional browser implementing HTTP, the EmWeb™/server behaves 
15 conventionally. However, as shown in Fig. 2, the EmWeb™/server is fully integrated with the 
application and therefore has access to information about the application and device in which it is 
embedded. 

Operation of the EmWeb™/server with respect to presentation of dynamic content is now 
described in connection with Fig. 1 1 . 

20 Before the operations shown in Fig. 1 1 commence, one or more archives are loaded by 

the server. When each archive is loaded, the server generates a hash table using the archive 
header data structure to make documents easy to locate using URLs. 

First, the browser requests a document at a specified URL, using HTTP 1101. The 
EmWeb™/server acknowledges the request, in the conventional manner 1 103. The 

25 EmWeb™/server then uses the hash table of the archive header to locate the document requested 
and begin serving static data from the document 1 105. When a document node is encountered, 
for example denoting the presence of an EMWEB_STRING tag, then the server passes control to 
the code fragment 1 107a of the application which had been included in the EMWEBJSTRING 
tag 1 107. When the code fragment completes execution and returns some dynamic data 1 109, 

30 the Em Web™/server then serves that dynamic data to the browser 1111. The EmWeb™/server 
then resumes serving any static data remaining in the document 1113. This process continues 
until the entire document, including all dynamic elements has been served. 
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Run-time serving and submission of forms is now described in connection with Fig. 12. 
A brief inspection of Fig. 12 will show that form service and submission proceeds along similar 
lines to those for serving dynamic content. 

The browser first requests a URL using HTTP 1201 . When, during service of the 

5 contents of the URL requested, a form is encountered, service of the form and any HTML- 
defined default values commences normally. The EmWeb™/server then makes a call to the 
application code 1203 to run a function 1203a which may substitute alternate default values 1205 
with which to fill in the form. The document served then is made to include the default values 
defined by the static HTML as modified by the application software 1207. Later, when the user 

10 submits the form, the browser performs a POST to the URL using HTTP 1209. The form data is 
returned to the application by a call 1211 made by the EmWeb™/server to a function 1211 which 
inserts the data returned in the form into the data structure defined therefor within the application 
code. The response 1213 is then served back to the browser 1215. 

Finally, it should be noted that there may be times when a request for dynamic content 

15 may require extended processing, unacceptably holding up or slowing down other operations 
performed by the application. In order to avoid such problems, the EmWeb™/server implements 
a suspend/resume protocol, as follows. The suspend/resume protocol exists within a context of a 
scheduler maintained and operated by the server. The scheduler includes a task list of scheduled 
server tasks to be performed. 

20 Fig. 1 3 illustrates a situation where a browser requests a document containing an 

EMWEBJSTRING tag whose processing is expected to interfere with other application 
operations. The initial HTTP request 1 301 for the document is acknowledged 1303, 
conventionally. When the EMWEBJSTRING tag is encountered, control transfers 1305a to the 
appropriate source code fragment 1305b in the application. The application then calls the 

25 suspend function 1307 of the EmWeb™/server and returns a dummy value 1309 to the function 
call generated at the EMWEBJSTRING tag location. Calling the suspend function 1307 causes 
the scheduler to remove the EMWEB_STRING processing task from the task list. When the 
application has finally prepared the dynamic content required in the original function call, the 
application calls a resume function 13 1 1 of the EmWeb™/server. Calling the resume function 

30 1311 requeues the EM WEB-STRING processing task on the task list, as the current task. The 
EmWeb™/server responds by calling 1305c the function 1305d defined at the 
EMWEBJSTRING tag again, this time immediately receiving a response from the application in 
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which the requested dynamic content 1313 is returned. The dynamic content is then served to 
the browser 1315. 

The suspend/resume feature is particularly useftil in distributed processing environments. 
If an embedded application is running on one processor of a distributed environment, but 
5 dynamic content can be requested which is obtained only from another processor or device in the 
distributed environment, then the use of suspend/resume can avoid lockups or degraded 
processing due to the need to obtain the dynamic content through a communication path of the 
distributed environment. Consider, for example, a distributed system including a control or 
management processor, and several communication devices. An embedded application running 
10 on the management processor can be queried for configuration data of any of the communication 
devices. Without suspend/resume, obtaining that data would tie up the communication path used 
by the management processor for control of the various communication devices, degrading 
performance. 

The described embodiment of the invention illustrates several advantages thereof. For 
1 5 example, an embedded application can now have a GUI which is independent of either the 
application platform of that used to view the GUI. For example, the GUI can be operated 
through a Microsoft® Windows™ CE machine, Windows™ 3.x machine, Apple Macintosh, 
WebTV box, etc. running conventional browser software. Also, development of a GUI for an 
embedded application is greatly simplified. The look and feel is designed using conventional 
20 HTML design techniques, including straight-forward prototyping of the look and feel using a 
conventional client server system, using simple HTML extensions. Integration with the 
embedded application does not require the developer to learn or develop any special interface, 
but rather uses some HTML extensions to incorporate application source code directly into the 
HTML content. Yet another advantage in that the entire embedded application along with an 
25 HTTP-compatible server and the content to be served is reduced to a minimum of application 
source code, data structures for static data and data structures for dynamic data. 

The present invention has now been described in connection with specific embodiments 
thereof. However, numerous modifications which are contemplated as falling within the scope 
of the present invention should now be apparent to those skilled in the art. For example, the 
* 30 invention is not limited to content whose source is HTML. Any mark up language could be used 
in the context of this invention. Alternatively, the content source could be raw text, which is 
particularly suitable for situations where the output of the user interface is also processed by one 
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or more automatic software text filters. Therefore, it is intended that the scope of the present 
invention be limited only by the properly construed scope of the claims appended hereto. 
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1. Introduction 

The explosive growth of the World-Wide-Web in recent years has created anew standard 
for the Graphical User Interface (GUI) of networked applications: the Web browser. 
Netscape® Mosaic, and other commercial and public-domain Web browsers are 
ubiquitous and inexpensive. 



1.1. Web-based Network Management 

Network management is a natural application for the World-Wide-Web, Before the Web, 
network management required end-users to purchase expensive custom-built GUI 
applications that used the. SNMP protocol to manage network-based devices. With 
World-Wide-Web technology, many of these applications can be replaced by 
economical Web browsers. 

World-Wide-Web standards make It possible to migrate the "look-and-feeP intelligence 
of the device configuration GUI away from third-party and custom-built network 
management applications and Into the managed device itself. This migration gives 
vendors control over the configuration "look-and-feel" of their products among both low- 
cost Web browsers and the high-end third-party network management applications of 
the future. 

Web-based network management can greatly accelerate the time-to-market for 
products traditionally managed by SNMP. With SNMP-based management, new 
product features require significant engineering resources to design and implement 
proprietary MIBs and develop customized GUI applications to manage the new features. 
On the other hand, Web-based management GUI applications can be rapidly prototyped 
and implemented using simple HTML forms. 

SNMP will continue to play an important role in high-end network management 
applications by utilizing standard MIBs to monitor the overall topology and health of 
devices throughout the enterprise network. However, the new World-Wide-Web 
standards offer an exciting alternative to SNMP for the configuration and management 
of individual devices. 



1.2. Web-based Systems, Devices, and Software 

Embedded Web server technology can enable remote configuration, monitoring, and 
diagnostic capabilities for a wide range of applications. Imagine sending and receiving 
faxes, checking your voice-mall, and knowing the availability of your favorite candy bar 
In the vending machine down the hall by using your Web browser? Your office manager 
could configure the phone switch and voice-mail system, check the toner and paper 
levels in the photocopying machine, and monitor the security alarm system from their 
desktop. Your automobile mechanic could connect to your car's computer to perform 
engine diagnostics, and If -they were stumped, the manufacturer could examine the 
results from around the world over the Internet. 
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1.3. Goals 

ErnWeb™ by Agranat Systems is a family of Embedded World-Wide-Web protocol 
software products engineered for the demanding real-time requirements of embedded 
systems. 

Goals of the EmWeb product architecture include: 
• Ease of use 

. Support rapid prototyping and implementation of new World Wide Web interfaces 
including device monitoring, configuration, and network management. 

. Easily portable to a wide-variety of real-time embedded operating environments 
with limited operating system capabilities, memory, and CPU resources. 

. Easily upgradable with new releases as World-Wide-Web standards continue to 
evolve rapidly. 

- High performance 

. Efficient implementation for real-time processing environments. 
. Small foot-print to minimize FLASH and RAM resources required. 

- Security 

. Support for authentication and security standards as they continue to evolve. 
. Configuration of method-independent access controls. 



1.4. Assumptions 

This functional specification assumes that the reader is familiar with the C programming 
language, the World-Wide-Web, and standards such as HTML (Hyper-Text Markup 
Language). Knowledge of HTTP (Hyper-Text Transport Protocol) and CGI (Common 
Gateway interface) is also helpful to understand some of the more advanced features, 
but isnt required for most applications. 
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2. Overview 

One draw-back to traditional World-Wide-Web servers is the CGI Interface. Although 
HTML provides a convenient mechanism for sending interactive forms to a Web browser 
complete with text fields, checkboxes, and pull-down menus, the CGI Interface used by 
server applications to process submitted forms is difficult to master. Form processing is 
essential for network management applications because it is the best way to implement a 
device configuration screen using World Wide Web protocols. However, CGI is not an 
appropriate interface for the rapid implementation and prototyping of new network 
management capabilities (Em Web's number one goal). Another draw-back to traditional 
World-Wide-Web servers is the static nature of the content of files served to the Web 
browser. These files are typically resident on disk and are not expected to change 
frequently. On the other hand, the data of interest to network management applications, is 
constantly changing (e.g. the number of packets received on a particular Ethernet port). 

The EmWeb architecture works around the draw-backs of traditional World-Wide-Web 
servers by extending the standard HTML specification with new proprietary tags 
developed by Agranat Systems. These tags make it possible to provide a more intuitive 
HTML form processing interface for embedded systems, and give the application run-time 
control over the document content for the presentation of dynamic data. Note that these 
tags are not actually sent to the Web browser. Instead, they are stripped out and 
interpreted by the EmWeb/Compiler. 

The EmWeb product consists of two components: The EmWeb/Compiler and the 
EmWeb/Server. 

The EmWeb/Compiler Is a tool provided by Agranat Systems that runs on an engineering 
development work-station under Unix, Windows/NT (x86), and Windows/95. The tool 
compiles one or more directories of files containing HTML, Java, text, graphics, etc., Into 
one or more EmWeb archives. Each archive consists of an object code component and a 
fixed data component. These components are usually linked into the target's run-time 
image at compile time. However, the EmWeb architecture permits the dynamic loading 
and unloading of the fixed data components at run-time. Furthermore, if the target's 
operating system supports the dynamic loading and linking of object code modules, then 
entire archives may be loaded and unloaded at run-time. 

The EmWeb/Server is a portable run-time library implemented in ANSI C which Is 
compiled and linked with the target platform's application software. The EmWeb/Server 
implements the HTTP protocols to handle requests from Web browsers and interfaces 
with the archives created by the EmWeb/Compiler. The EmWeb/Server implements an 
application interface (API) to the target software environment's memory management 
buffer management, and TCP/IP protocol stack. 
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3. EmWeb/Compiler 

The EmWeb/Compiler processes directories of HTML and other Web documents to 
generate ANSI C code. The generated C code is then compiled using a C cross-compiler 
to generate object code for the target system. HTML forms are translated by the EmWeb/ 
Compiler into a simple C function call interface customized to the application. The 
software developer is responsible for implementing the application-specific C code using 
these simple interfaces. The EmWeb/Compiler can generate function prototype 
definitions (a C include header file) to ensure correctness, and optionally generates stub 
functions to accelerate development 

The figure below illustrates the operation of the EmWeb/Compiler. 



Copyrights) 1997Agranat Systems, inc. Pag© 4 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 PCT/US97/13817 

-33- 



Source Directory Tree 
HTML, Java, text, graphics 




«MfiSbmp1Ier> 




Em Web Archive 




EmWeb Archive 


(Fixed Data) 




(Object Code) 


ew data.dat 






ewidatax 




ew_code.c J- 



Object Code 



Application-Specific 
ew_proto.h 
ew_stubs.c 



CO 



Application-Specific 




Figure 1: EmWeb/CompIler 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 

EmWeb™ Functional Specification 



-34- 
Confidential 



PCT/US97/13817 



EmWeb/Compiler 



3.1. EmWeb Context 

The EmWeb/Server maintains a handle of type Evscontext at run-time that corresponds 
to a specific HTTP request from a Web browser client This handle is made available to 
the application code responsible for providing the run-time content of HTML documents 
and forms. 

The EmWeb/Server contains a library of functions available to the application for 
extracting information attached to this handle. For example, the application may want to 
determine the type of browser making a request, and change the look-and-feei of the 
requested document to take advantage of features available to particular browsers. In 
this example, the application could extract the browser type as follows: 

bytes ° ews Con text User Agent (ews Con text, 

user_agent, sizeof (*user_agent) ) ; 

For more information about available context information functions, refer to 4.1.5. 
Request Context Access, page 48. 

3.2. HTML Extensions 

The content to be provided by the EmWeb server is prepared as you would content for 
any normal Web server. The developer constructs a directory tree (or trees) of 
documents, which may include HTML documents, Java, text, graphics, and sound 
samples. The EmWeb compiler is then run over the content directory tree to build an 
Internal database that is compiled and linked with the EmWeb/Server and the system 
code. 

EmWeb defines proprietary HTML tags and attributes for access to system data and 
dynamic system control of the served documents. These tags are never served to 
browsers by the EmWeb/Server, and because (with one exception) they have no body 
part (they do not use a start and end tag, but only a stand-alone tag with attributes), they 
are ignored by browsers that see them when browsing the content tree either locally or 
via a non-EmWeb server. This facilitates testing and prototyping of content. 

3.2.1. EMWEB_STRING 

The <emweb_string> tag is used to provide applications with run-time control of an 
HTML document's content by encapsulating a fragment of C code in the document 
itself. This C code is executed as the document is being served to a Web browser and 
returns a null-terminated character string that is inserted as-is into the document in 
place of the <emweb_string> tag. 

To include content in a document (which may include any standard HTML): 
<EMWEB_STRING C- # ...; return (char •) somestring; ' > 

or 

<EMWEB_STRING EMWEB_ITERATE C-'...; return (char *) somestring; ' > 
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The EmWeb/Compiier extracts the C language code fragment from the emweb_string 
tags in an HTML document and constructs a C module from them. Each fragment must 
end with a return statement that returns a pointer to a null-terminated string (or a kull 
value which inserts no content). When the location of the emweb_string tag in the 
content is reached, the ErnWeb/Server executes the code fragment and inserts the 
returned string Into the document If the optional emweb_iterate attribute is specified, 
the code fragment is called repeatedly until it returns a null pointer value. The number 
of iterations already processed (beginning with zero) is available to the code fragment 
by calling: 

evsContextlterations(evsContext) ; 
Note that the local variable 

EwsContext evsContexc; 

is made available to the emweb_string C code fragment by the Em Web/CompiJer. 

The returned string must not be an automatic (stack) variable. The value is copied for 
transmission by ErnWeb/Server immediately after returning. Thus, a single static 
string buffer may be shared by multiple code fragments. If pre-emptive multi-threading 
is to be used, the application may maintain a per-request buffer as part of its network 
handle. Alternatively, emwebjeterate may be used to support dynamic allocation of the 
string buffer as follows. On the first iteration (#0), memory may be allocated, filled with 
data, and returned to the ErnWeb/Server for transmission. On the second iteration 
(#1), memory may be released and a null pointer returned to terminate the iteration. 

The Em Web/Compiler treats the embedded code opaquely; from the compiler's point 
of view, the code is simply a string of text that gets assembled into a generated code 
file. (See 3.6. Compiler Output, page 25). 

As such, the Em Web/Compiler needs to know the beginning and end of the embedded 
C code fragment. The character following the c- attribute in the emweb string tag 
identifies the "bounds" of the embedded C code. This character musf be either a 
single quote f) or double quote (")• When the EmWeb/Compiier identifies this 
"boundary character", It then treats all following characters as part of the embedded C 
code fragment, until it finds the next teiminating "boundary character". 

The obvious problem here is that the embedded C code can contain a single or double 
quote as part of the C code. For example: 

return "Exanple of EnWeb's dynamic content\n"; 

In order to keep the EmWeb compiler from mistakenly confusing a single or double 
quote that belongs to the C code fragment as the ending "boundary character", the 
programmer must escape (using *V) any character intended for the C code that would 
be confused with the terminating boundary character. Thus, the above code fragment 
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could be embedded in an emweb_string tag in either of the following ways: 

<EMWEB_sraiNG O' return "Example of EmWebV s dynamic content\n w ; ' > 
<EMWEB_STRING C- M return \"Exaniple of EmWeb's dynamic content\n\ M ; M > 

The <emweb_string> tag may optionally be typed using the emwebjtyfe attribute as 
follows: 

<EMWEB_STRING EMWEBJTYPE -DECIMALJJIOT 

return (uint32 *) &some~integer ; * > 

If emwebjtypb is specified, then the C code fragment must return a pointer to data with 
the corresponding type. EmWeb/Server will convert the value into a character string 
automatically. A table of supported types can be found in section 3.2.5.3. HTML Form 
TEXT Input Fields, page 13 

3.2.2. EMWEB .INCLUDE 

The Em Web/Server provides server-side inclusion of any part of its content tree using 
the emweb_include tag; It Is used In the same way as the emweb_string tag: 

<EMWEB_INCLUDE COMPONENT" ' Local* URL' > 

or 

<EMWEB_INCLUDE C«'...; return (char *) localURL;'> 

or 

<EMWEB_INCLUDE EMWEB_ITERATE C» ' . . . ; return (char *) localURL; ' > 

If the component tag is specified, the specified local element is resolved and inserted 
into the current document. This allows standard parts such as headers and footers to 
be stored only once. 

As in emweb_string, the fragment specified by the c« attribute must end with a return 
statement "that returns a pointer to a null-terminated string (or null). For 
emweb_xnclude , however, this string is treated as a relative or absolute path name 
withinlhe local content tree. The path name is resolved to an entire document, which 
is then inserted in the current document for return to the browser. If the optional 
emwebjeterate attribute is specified, the code fragment is called repeatedly until it 
returns a null pointer value. The number of iterations already processed (beginning 
with zero) is available to the code fragment using the same access routine used for 
emweb_string. This tag is useful for building a response from components that may 
be part of the original document tree, or created dynamically. 

Note that the local variable 

EwsContext evsContext; 

is made available to the emweb_include C code fragment by the Em Web/Compiler. 



Copyright © 1997Agranat Systems, Inc. Page 8 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 

EmWeb™ Functional Specification 



-37- 
Confidential 



PCT/US97/13817 



EmWeb/Compller 



The same quoting rules as emweb_string apply to emwebjcnclude. 

3.2.3. EMWEB.HEAD 

Because the <emweb_string> and <emweb_include> tags allow the application to 
encapsulate fragments of C code within an HTML document, a mechanism is needed 
to provide the code fragments with the necessary global definitions, header files, 
external declarations, etc. needed for compilation. The <emweb_hem» tag is provided 
for this purpose. 

<EMWEB_HEAD C»'#include f ile-name.h' > 

The emwebjiead tag, If present, should appear in the head portion of the HTML 
document (this is not enforced, but the code fragments from all emwebjiead fragments 
are placed at the beginning of the generated module, so doing so is less confusing);' it 
specifies a source fragment to be inserted in the generated module outside any C 
function. This fragment may declare variables, constants, or (as shown in the example 
above) C preprocessor directives - it could even define entire subroutines. This 
fragment is never executed directly by the EmWeb Server, so it does not insert any 
content into the document at the location of the tag. 

Note that all emwebjiead code fragments from all HTML files in an archive are 
combined into the generated archive object code component source file. Therefore, it 
is recommended that common #inciude directives appear only in one document in the 
archive (typically, the index.html document at the archive's root directory). 

The same quoting rules as emweb_string apply to emwebjiead. 

3.2.4. EMWEB.PROTO 

When designing an HTML document, it may occasionally be useful to provide content 
with which to preview the page, but which does not appear in the compiled document. 
This is accomplished with the emwebj?roto begin and end tag; the EmWeb/Compiler 
removes these tags and everything between them when producing the document 
database, but the text between them is interpreted normally by a browser viewing the 
HTML document directly or via a conventional server. For example: 

<H4> 

System: <EMWEB_STRING C- M return mib2sysName; "> 
<EMWEB~PROTO> system - name < /EMWEB J>ROTO> 

</H4> 

When compiled, the system name displayed in the first level header will be the value 
in the string variable mibasysName, but viewed with a browser when previewing it Jooks 
like: 

System: system* name 

Note that the EmWeb/Compiler Ignores HTML comments (e.g. "< • - - . . . -->"). If 
emweb_string and emweb_include tags are present within HTML comments, they will 
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be expanded by EmWeb/Server. If it is desirable to "comment out" an emweb_string 
or emweb_include tag, emweb_proto tags should be used instead, 

3.2.5. Forms 

Form processing takes place as two operations: serving the form to the browser, 
possibly with current or default values set in some form input elements, and 
processing the values from the submitted form. Each of these operations is assisted 
by an application-provided routine associated with the form. Prototypes for these two 
application routines are produced for each form by the EmWeb/Compiier using 
information provided by EmWeb attributes on the FORM and its input elements. 

Restriction: While HTML allows it, EmWeb does not support 
nested form tags (you may not have a form within a form). 

The elements for each form are combined in a generated C data structure by the 
EmWeb Compiler; this structure is passed by the EmWeb Server to each of the two 
form processing routines, and Includes information on the status of each element 

3.2.5.1. Form Element Names 

The emweb_name attribute is used to specify the names to be used by the EmWeb/ 
Compiler when generating function and structure names. 

On the form tag, the emwebjtame attribute specifies a base name to be used to 
generate the function names and the form data structure name. (This implies that the 
value of the emweb_name attribute must be a valid C identifier). Note that if emweb name 
is not present in a <form> tag, then the form is simply ignored by the EmWeb/ 
Compiler and is passed as-is to the brov/ser. 

Consider the following example. Suppose there exists an HTML document 
"example.htmr that contains: 

<FORM METHOD* POST EMWEB^NAME ■ too ACTI0N»i>ax > 

The action attribute is optional; if action is not specified, then there may be only one 
form in the document If action is specified, it is served to the browser as 
"AcrioN-exampie. html/bar". (This allows EmWeb/Server to differentiate between 
multiple forms in a document. It also allows the submission of forms to be protected 
by different access controls than the serving of forms. See 3.4. ACCESS Files, 
page 22). 

The EmWeb/Compiier generates the following function and structure prototypes: 

typedef struct EwaPorm foojs 
{ 

struct 
{ 

} value; 
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struct 
{ 

* • • 
} status; 
) EvaFoxm_/oo; ... 

void ewaFoxmSexve_/o© {EvsContext context, EwaFoxm_x*oo -foimp); 
char * evaFoxmSubmit_foo (EwsContext context, EwaFoxni_/oo -foxmp); 

The ellipsis (...) above are replaced by declarations of the structure members to hold 
the data for each form element The standard HTML name attribute is used in each 
input tag of the form to specify the structure member names within the form data 
structure. 

Restriction: While HTML allows arbitrary string values for name 
attributes, EmWeb requires that name attributes are valid C 
identifiers since they are used as field names in the form's C 
structure definition. 

The application-provided evaFoxmsexve_f©o function is invoked by EmWeb/Server 
when the HTML document containing the form is requested by a Web browser. This 
provides the application with an opportunity to modify the default values displayed 
by the browser at run-time. 

The application-provided evaFoxmsubmit_foo function is invoked by Em Web/Server 
when the corresponding HTML form is submitted. This provides the application with 
an opportunity to process the submitted form data and generate an appropriate 
response. 

3.2.5.2. Form Data Structure 

The generated form data structure passes information for the form between the 
system and the EmWeb/Server. it has two sections: Value 1 and 'status 1 , each 
containing one or more members for each form element. The 'status 1 section 
member is a flag that indicates the status of the contents of the Value 1 member. The 
Value 1 member contains the data for the form element in an internal representation 
which may be specified by the form author using the emwebjtype attribute. For 
example: 

< INPUT TYPE-TEXT SIZE- 15 MAXSIZE-15 VALUE "127 ,0.0.1 
NAME»i£Addx EMWEBJTYPE °DOTTED_IP> 

The example above produces the following structure members: 

typedef stxuct EwaForro foo_s 
{ 

stxuct 

< 

uint32 ifAddz: 
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uintf i£Addr_size; 
uintf ifAddrjnaxlength; 

} value; 
struct 
{ 

• • • 

uint8 ifAddx; 

} status; 
} EwaForrn_foo; 

The value. if Addi member contains the host-order 32-blt IP address. The 
ewaFormserve^foo function sets this structure member with the value to be displayed 
on the form and sets status. ifAddr to ew_form_initialized. (Note that if 
status . ifAddx is not changed by the application, then the form is displayed with the 
value specified by the value tag, "127 .0.0. 1*). When the Web browser end-user has 
entered a valid IP address and submits the form, the EmWeb/Server sets 
value. ifAddi to the value provided by the browser and sets status. ifAddr to 

EWJPORM_RETURNED before invoking ewaFormSubmi t_f 00. 

The vaiue.ifAddr_size member is generated because the size attribute was 
specified and defaults to 1 5* This gives ewaFormserve_f 00 an opportunity to override 
the field size value before serving the form. '(This field is not used by 
ewaFormSubmi t_f 00). 

The value. if Addrjnaxiength member is generated because the maxsize attribute 
was specified and defaults to 15. This gives ewaFormserve foo an opportunity to 
override the maximum field size value at run-time. (This" field is not used by 

e wa Forms ubmi t_f 00) . 

The status. ifAddr member is used to indicate the status of the form element 
member and consists of a bit field defined as follows (from src/inciude/ews_def . h): 

/* 

* For ewaFormserve * 
*/ 

#define EW_FORM_INITIALIZED 0x01 /* set if field initialized */ 
#define EW_FORMJDYNAMTC 0x02 /* set if field ewaAlloc'ed */ 

/* 

* For ewaFormSubmi t * 
V 

#define EW_FORM_RETURNED 0x10 /• set if value returned */ 

#define EW_FORM_PARSE_ERROR 0x20 /* set if value invalid •/ 

#define EW_FORM~FXLE_ERR0R 0x20 /* or i/o error */ 

For the ewaFormserve^* call (when the form is being sent to the browser), the 
structure is passed with the status for each element set to either zero, or 
ew_form_initialized If a default value was specified by the HTML vaule tag. When 
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control is returned to the ErnWeb/Server, the server checks each status and uses 
the new value for each field for which the ew_form_initialized is set Initialized 
values override any value, checked, or selected values specified in the source 
HTML document The ew^pormjdvnamic flag is only valid for type fields containing 
pointers to data (including text, password, hidden, textarea, submit, and 
emweb_type«hexstring) and Indicates that the memory referenced by the pointer 
was allocated by ewaAiioc and must be freed by EmWeb/Server using evaFxee after 
the form is served. 

When the form is submitted by the browser, the server attempts to convert each 
value returned by the browser to the appropriate type. The server sets the status 
member to indicate the status of the data member of the structure, and then calls the 
evaFoxmsubmit_* routine associated with the form. The ew_form_returned flag is s.et 
if a valid value was returned for the field in" the submission. The 
ewj?ormjparse_error flag is set if a value was returned, but was not parsed correctly 
ioF the specified emwebjtype. 

Note: When a form is submitted, the contents of a value field is 
undefined unless the ew_ivrm_re7vrned flag is set in the 
corresponding status byte. 

The application processes the submitted values and returns a string containing the 
URL to use as the redirection response to the Web browser, or null for an empty 
("204 No Content 0 ) response. Alternatively, the following function may be invoked to 
return a local relative URL from the archive as a response. 

EwsStatus evsContextSendReply ( EvsContext context, char * uxl ) ; 

3.2.5.3. HTML Form TEXT Input Fields 

A text field can be used to represent a wide variety of value types. For example, a 
text field may be used to configure an IP address in which case the natural C- 
language representation is a host-order 32-bit integer. By default, a text field is 
simply a null-terminated character string. However, the emwebjtype attribute may be 
used to indicate any of a number of supported EmWeb types. Refer to the table 
below for details. 

HTML text fields may specify a field size and/or a maximum length. If so, additional 
_size and_maxiength structure members are added to the form structure to give the 
appIication~run-time control over these values. The format and resulting form 
structure fields of a text Input field is given below. 

<INPOT TYPE-TEXT NAME-Jiawe { KAXLENGTH ° 8 max } (SIZE-asize) {VALUE«value} 
{EMWEBJTYPE-eirtype} > 

BWType name; /• defaults to value •/ 

uintf namejnaxlength; /* defaults to #max •/ 
uintf namejsize; /* defaults to flsize */ 
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The following table lists all emweb_type values currently supported. 



EMWEBJTYPE 


C-Type 


Description 


(not specified) 


char * 


mill tfimSnQfAfl ittriMM 

nuu-ieiTninaiea sinng 


DECIMAL_INT 


int32 


32-bit signed integer 


DECIMALJJINT 


uint32 


32-bit unsigned integer 


HEX_INT 


uint32 


oi-uii unsigneo nex integer 


DOTTED^ IP 


uint32 


32-bit host-order IP address translated using 
the conventional dotted-quad ASCII notation. 


IEEE_MAC 


char [6] 


IEEE MAC address (any of ':' or '•' or " is 
accepted between bytes on input, displayed 
with ':*). I/G bit is least significant (Ethernet) 


FDDI_MAC 


char [6] 


FDDI MAC address (any of ':' or '-' or " is 
accepted between bytes on input, displayed 

With '-M |/f3 hit ic mnet cinnifimnt /cnni i 

*viiu i/o on is mosx significant (PDUI, 
Token Ring) 


STDJ1AC 


chai[6] 


A MAC address - if ':' or " is used between 
bytes on input, it is interpreted as IEEE (l/G 
bit is least significant); if '-* is used on input, it 
is interpreted as FDDI (l/G bit is most signifi- 
cant). Displayed as IEEE with 


HEX_STRING 


struct { 
uint32 length; 
uintB * da tap; 
J; 


A hex string. Any of ':' or '-' or " or white- 
space is accepted between bytes. Displayed 
with ". 


DECNET_IV_ADDRESS 


uintl6 


area.node 


OBJECTED 


struct { 
uint32 length; 
uint32 *datap; 
1; 


A variable length array of unsigned decimal 
integers displayed with periods between ele- 
ments. 



Note that support for additional EmWeb types may be added in future releases. 



3.2.5.4...HTML Form PASSWORD Input Fields 

A password field is represented by a null-terminated character string. HTML 
password fields may specify a field size and/or a maximum length. If so, additional 
_size and jmaxiength structure members are added to the form structure to give the 
application run-time control over these values. The format and resulting form 
structure fields of a password input field is given below. 
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<INPUT TYPE-PASSWORD NAME-najne {SIZE«#sizeJ {MAXLENGTH«#maxlength] 
{VALUE«value} > 

char *name; /* defaults to value, or NULL*/ 

uintf name_size; /* defaults to #si2e »/ 

uintf jwraejnaxlength; /* defaults to #maxlength */ 

3.2.5.5. HTML Form CHECKBOX Input Fields 

Checkbox fields are represented as booleans. The optional value field is passed 
unchanged to the browser and is not used by EmWeb. 

<INPUT TYPE ■ CHECKBOX NAME Aflame {VALUE«value] {CHECKED} > 
boolean name; /* defaults to TRUE if CHECKED, else FALSE */ 

Note: If the m^FomjiETURNED bit in the status byte is set on 
submission, then the checkbox was checked and the value is 

TRVE. 

3.2.5.6. HTML Form RADIO Input Fields 

Radio buttons are represented by a C enumerated type generated by the EmWeb/ 
Compiler for each unique value assigned to a radio button in the archive. (The 
enumerated types defined by radio buttons and single select options are combined 
into a single archive-wide enumeration). 

< INPUT TYPE "RADIO NAHE»«ajne VALUE- vaiuel {CHECKED) > 
<INPUT TYPE-RADIO NAME « .name VALUE ■ vai u e2 {CHECKED] > 

typedef enum EvaFoxmEnum ew archive e 
{ ~ ~ 

• • ■ 

, vaiuei 
,vaiue2 

• • • 

] EvaForniEnuin_ew_arehive; 
EvaFormEnuin_e»*_arcijive name;/- defaults to checked value •/ 

Restriction: While HTML allows arbitrary string values for valve 
attributes, EmWeb requires that value attributes for radio 
buttons are valid C identifiers since they are used as 
enumerated type identifiers. 

Note that EmWeb/CompHer generates a single enumeration for each archive The 
ew_axchive suffix may be overridden at the command line (See 3.5. Compiler 
Options, page 23). r 

The following function Is provided as a convenience for translating from the 
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enumerated type's integer value to its name as specified by the value attribute: 

const char *ewsFormEnumToString ( EvsContext context, int value ); 

3.2.5.7. HTML Form IMAGE Input Fields 

Images are Vead only" from the point of view of the application as they return the x 
and y image coordinates selected by the end-user from the Web browser. Therefore, 
the generated structure value members are only useful in the ewaFormSubmit_* 
application function. Structure members are generated representing the x and y 
coordinates as follows. 

<INPUT TYPE-IMAGE NAME-aaine SRC-src {ALIGN-align} > 

typedef struct EvaForzn too s 
i 

struct 
{ 

uint32 
uint32 

• • • 
} value; 

struct 
{ 

♦ * • 

uint8 name; 

} status; 
} EwaForm_£oo; 

3.2.5.8. HTML Form HIDDEN Input Fields 

Hidden fields are identical to text fields except that they are not displayed (and thus 
not modified) by the browser. They are typically used by applications to pass context 
information to the browse. This context information is returned to the application 
during submission. 

< INPUT TYPE "HIDDEN NAME -name {VALUE-value} { EM WEB JTYPE-e Wtype ) > 
EwType name; /* defaults to value if present */ 

3.2.5.9. HTML Form SUBMIT Input Fields 

Submit buttons with name attributes are represented by a null-terminated character 
string. Submit buttons without name attributes are not included in the form structure. 

<INPUT TYPE-SUBMIT {NAME-name} {VALUE-value} > 

char *name; /* defaults to value if present */ 



name_x ; 
name_y; 
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3.2.5.10. HTML Form RESET Input Fields 

No structure member is generated for a reset button. 

3.2.5.11. HTML Form SELECT/OPTION Fields 

Select boxes may be used to select a single item from a iist (the default), or multiple 
Items from a iist (if the attribute multiple is present). For single item selection, values 
are represented by a C enumerated type generated by the Em Web/Compiler. (The 
enumerated types defined by radio buttons and single select options are combined 
into a single archive-wide enumeration). 

<SELECT NAME*jja/ne {SIZ£«#size} > 

<OPTION VALUE^vaiuel {SELECTED) > 
<OPTION VALUE»vaJue2 {SELECTED] > 

</SELECT> 

typedef enum EvaFoimEnum ew ax chive e 
{ 

,valuel 
,value2 
• • * 

) EwaPormEnuni_ew_ajcJiive; 
EwaPotmEnum_e«/_arc2jive name;/* defaults to selected value •/ 

For multiple item selection, a status and value form structure field Is generated for 
each option as follows: a 

(SELECT NAME-name {SIZB«#size) MULTIPLE > 

OPTION VALUE-vaiueJ {SELECTED) > descriptive text 
<OPTION VALUE-va2ue2 {SELECTED} > descriptive text 

< /SELECT) 

boolean valuel; /« defaults to TRUE if SELECTED */ 

boolean value2; /. defaults to TRUE if SELECTED -/ 

uintf narae_size; /* defaults to #size «/ 

HTML select fields may specify the size of the selection box. if so, an additional 
size structure member is added to the form structure to give the application run- 
time control over this value. hf^uw ui i 

Restriction: While HTML allows arbitrary string values for value 
attributes, EmWeb requires that value attributes for select 
options are valid C identifiers since they are used as 
enumerated type or structure field identifiers. 

3.2.5.12. TEXTAREA 

The textarea value is a null-tenmlnated string of characters. Additional value fields 
are placed In the form structure for the number of rows and columns in the textarea. 
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These fields are initialized by Em Web/Server to the defaults specified in the source 
HTML document, but may be overridden at run-time by the application's 

evaFormServe * function 



<TEXTAREA .COLS«#cols ROWS»#rows NAME* name > 
• • • 

</TEXTAREA> 

char +name; /• null- terminated string */ 

uintf name_cols; /* default to #cols */ 

uintf Jiame_xows; /* default to tfrovs •/ 

Note that the *name points to the text present in the textarea input field. 
3.2.5.13. File Upload 

RFC1867 file upload defines a new form input type as follows: 

<INPUT TYPE-FILE NAME-name {VALUE-value} {SIZE«*rovs { , *cols} ) > 

Note: Use of file input types requires that the form uses 
multipart/form-data as an encapsulation type. This must be 
specified in the <form> tag as follows: 

<FORM METHOD-POST ENCTYPE-multipar t/f oxm-data ... > 

This causes the browser to prompt the user for a local (relative to the browser) 
filename (by default, value is used if specified). On submission, the file is uploaded 
to the server along with other form field values. 

EmWeb/Compiler parses file type input fields into the following fields in the form 
value substructure: 

char "name; /• serve only: default filename */ 

EyaFileHandle name_handle; /* submit only: received file */ 

uintf name_size; /• serve only: #rovs (no #cols) */ 

uintf name_rovs; /* serve only: #rows (w/#cols) */ 

uintf name_cols; /* serve only: #cols */ 

In addition, the following fields in the form status substructure are generated as well: 

uint8 name; /• status for filename */ 

uint8 namejiandle; /* status for received file */ 

For more detailed Information on the file upload interface, please refer to 4.1 .8. Local 
Filesystem Interfaces, page 54. 

3.2.6, Graphic Maps 

The HTML ismap attribute on an img tag specifies that the file is an image map. Such 
an img tag must always be enclosed within an anchor that specifies a hyper-link URL 
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The ismap attribute causes a click within the image to be sent as a request to the URL 
in the enclosing anchor, qualified by the x & y coordinates of the click within the image. 

EmWeb provides support for image maps through a map element in the HTML source 
tree which specifies rectangular regions and URLs to be associated with them. 

The interface designer creates an image map file, a text file which defines the URLs 
to be provided for each region of the image. The syntax of the entries is: 

rect -line | default -line 

iect-line ::« i ec t uxl point point 

point : :« x,y 

default -line ::- default url 

The iect token specifies a URL to be served in response to the specified top-left and 
bottom-right coordinates. The optional default specifier provides the URL for any 
coordinate not specified by some r ect (only one def aui t is allowed). Order of the rect 
lines is significant - If the regions overlap the first match takes precedence. 

If no match is found, and no default is specified, the server returns "no content" to the 
browser, effectively a no-operation. Otherwise, the matching URL is returned to the 
browser as a redirection. The URL may be relative to the map file in the archive or 
absolute. ' 

The map files are compiled by EmWeb/Compiier so that they do not need to be parsed 
at run-time by the EmWeb/Server. The following illustrates the syntax of a typical map 
file: . 

iect examplel.html 15, a 8 169,37 
rect example2.html 157,46 385,65 
zect example3.html 365,71 460,87 
default /home. html 

If the above file was "sampie.map", and corresponded to the image "/pictures/ 
sampie.gif", the following HTML would be used to implement the map: 

<A HREF-sample.map»> <img SRC-/pictuies/sample.gif » ISMAP> </A> 

By convention, map files use the suffix W, but this can be changed. See 3 3 
mime.types Configuration File, page 20, and 3.4. .ACCESS files, page 22. 

3.2.7. Cache Control 

The HTTP/1.0 protocol has some simple provisions for communicating cachability 
information to caches and proxies between the server and the browser HTTP/1 1 
provides even greater cache control features. 
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By default, EmWeb/Server classifies compiled-ln documents as being either static or 
dynamic. A document is considered dynamic if it contains one or more emweb strings, 
£mweb_includes, or EmWeb-enhanced HTML forms. Otherwise, the document is 
static 

When serving a static document, EmWeb/Server sends a Last-Modified HTTP header 
indicating the time and date that the corresponding archive was created by the 
EmWeb/Compiler. No other cache control headers are generated in HTTP/1.0. With 
HTTP/1.1, a Cache-Control header is generated indicating either "public" If the 
document is not protected by an authentication realm, or "private" if it is. 

When serving a dynamic document, EmWeb/Server sends a Last-Modified and 
Expires HTTP header Indicating the current time and date, as well as "Pragma- no- 
cache" for HTTP/1 .0 and "Cache-Control: no-cache" for HTTP/1 .1 . 

It may be desirable to override the above default behavior for certain applications 
Specifically, an application may desire static treatment of a dynamic document. For 
example, If emweb^incitoe tags are used to insert common headers and footers 
EmWeb/Server would treat the document as dynamic even though the content may 
actually be static. The following EmWeb tag may be used anywhere in an HTML 
document to mark it as static for cache control purposes: 

<EMWEB_STATIC> 

3.2.8. EmWeb CGI 

The mechanisms described above are designed to meet most needs of the system 
designer without having to deal with the complexities of direct access to the HTTP 
input and output mechanisms. If such access is desired, the EmWeb raw CGI interface 
provides access similar to that available in a CGI program environment on any HTTP 
server. See 4.1.6. Raw CGI, page 51. 

3.3. mime.types Configuration File 

The mime . types configuration file is read by Em Web/Compiler before processing source 
directories of HTML and other Web documents. If n -m" is specified on the EmWeb/ 
Compiler command line, then the specified file is used. Otherwise, EmWeb/Compiler 
searches for a mime . types file by first looking at the semweb mime environment variable, 
and then looking at $emweb_home/$emweb_mime. If the semweb mime environment variable 
is not specified, it defaults to "mime.types". If the semweb home environment variable is 
not Specified, it defaults tO "/usi/local/share/emweb". 

The mime.types file contains default parameters for files derived from the file name 
suffix. For example: 

# 

# Emweb/Compilex mime.types file example 

# Anything after a is a comment. 

# A line vhose first character is white space is a continuation line 
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# Each specifier oust end in 



.html - 
.txt 



type- text/html paxse-emweb_html compiess ; 
type- text/plain paxse-emveb_text compiess ; 
type«image/gif paise»binaiy~; 
imagemap; 
index-index .html ; 



.gif 
.map 



The suffix may be any tall match; It is not restricted to values starting with 7. The 
mime, types file contains specifiers for the default access rights and parameters of files 
ending with a particular suffix. Each specifier is the file name suffix, followed by one or 
more of the following attributes, followed by a semicolon: 

iype B mime-type 

Specifies the MIME encapsulation media type represented by the file. Media 
type values are registered with the internet Assigned Number Authority 
(IANA). Use of non-registered media types is discouraged. (Note that the 
jnime-cype must be quoted if it contains a ';' line-terminator character). The 
. default type depends on the parser selected (see below). 

pawemweb^htm! / emwebjext / text J binary 

Specifies how the EmWeb/Compiler is to parse the file. 

emwebhtml indicates that the file contains HTML and the EmWeb/Compiler 
handles <emweb_string>, <emweb_in«.ude> , <emweb proto>, 
<emweb_hbad>, and EmWeb HTML forms. The default type" for the 

EMWEBHTML parser iS "text/html". 

emweb_text indicates that the file contains text which may contain 

<EMWEB_STRING > , < EMWEB_IN CLUDE > , <EMWEB PROTO> and < EMWEB HEAD) 

directives. However, such a file may not contain EmWeb HTML fomis. The 
default type for the emweb_text parser is "text/plain". 

text indicates that the file contains text which should not be parsed (e.g 
PostScript). The default type for the text parser is "text/piain". ' 

binary indicates that the file contains raw binary data. The default type for 

the BINARY parser is "application/octet-stieam". 

The default parser is binary if not otherwise specified. 



Specifies that the content should be compressed. The EmWeb 
compression algorithm creates an archive-wide dictionary of common 
strings which are referenced by the individual documents. Compression 
ratios for text files of 50% can be achieved If there is sufficient redundancy 



compress 
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throughout the archive. However, compression ratios will vary widely among 
applications. The default is no compression. 

nocompress 

Specifies that the content should not be compressed. (This is typically used 
in an _access file to override a specification in mime. types). The default is 
no compression. 

imagemap 

Specifies that the content is an Imagemap that defines the coordinates for 
an image. This implies "hidden", and inherits realm membership from the 
current directory. 

ignore 

Specifies that the entry should be skipped (i.e. not included in the archive). 
This is typically used to exclude source control directories, backup files from 
editors, etc. 

The current directory is specified using 7 as the suffix name. Directories may contain 
the attribute: 

\ndex=index-file-name 

The element (in the directory) to be returned in response to an access 
request to that directory (a URL whose last component is the directory 
name). 



3.4. .ACCESS Files 

Access to individual files and directories is controlled by a configuration file in each 
source archive directory named '_access\ The _access files contain specifiers for the 
access rights of elements in the corresponding directory (and optionally for the directory 
itself using the 7 specifier). Specifiers In the _access file override specifiers in the 
mime. types file. Each specifier is the file name (not a suffix) followed by any of the 
attributes defined above for mime. types. The following additional attributes are 
permitted in _access files. 

realm 3 realm-name 

requires that any request to access the file or directory must be 
authenticated in the named realm. If an empty realm is given (i.e. realm—-), 
then the file may be accessed without any authentication. See 4.1. 4.' 
Authentication and Security, page 39. 

hidden 

Specifies that the file Is included for use in constructing dynamic content and 
may not be seen or accessed directly by a Web browser. (Note that the 
hidden and realm attributes are mutually exclusive). 
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link*!/// 

, Specifies that this element is linked to a diflerent URL When accessing this 
file, the browser shall be redirected to the specified relative or absolute URL 
The link attribute may not appear with any other attributes. 

If realm is specified for a directory, it applies as a default for all files and subdirectories 
within the current directory. Specifications for individual files in an ^access file override 
defaults specified for the directory. 

If hidden is specified for a directory, it applies as a default for all files and 
subdirectories within the current directory. Individual files and subdirectories may be 
overridden by specifying a realm. 

Note that a default 7 specification for index may be included in the mime . types file and 
overridden in individual ^access files. 

In addition to the elements in the directory, the ^access file may specify the base name 
for CGI elements (which do not need actual files in the HTML tree). These are 
specified with the access attribute cgi below and may also have a realm attribute. 

cg\=symbol 

The element is a CGI application. The symbol value is used by the Em Web/ 
Compiler to generate application-specific prototypes for the raw-CGI 
interface. See 4.1 .6. Raw CGI, page 51 . 

Finally, form action URLs used when a browser submits an Em Web HTML form to the 
Em Web/Server may be protected by a specific realm which may be different from the 
realm of the document containing the form. In this way a form may be used to display 
data to a less restricted realm, while permitting changes only from users in a more 
restricted realm. For example, if the HTML file "example, html" contained an Em Web 
HTML form tag <form method-post emweb^name * f oo Acri0N«bar>, the following 
specifier may appear in the ^access file corresponding to the directory containing 

'example. html". . 

example, html /bar r ealm«xeai/n -.name 



Access control is only computed by the EmWeb/Server on the initial URL; if the 
element to be returned in response to the URL includes an emwebjtnclude tag, the 
EmWeb/Serverdoes not perform an access check on those individual elements. 

3.5. Compiler Options 

The EmWeb/Compller program "ewe" takes the following command-line arguments 
followed by a list of one ormore directories and/or files with which to build an EmWeb 
archive. 
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(-n | -name ) <archive-symboi-base-name> 

The base symbol name produced by EmWeb/Compiler corresponding to 
the object part (and, If -c Isalso specified, the data part) of the archive. By 
default, this parameter Is Vvaxchive". Thus, the following symbol is 
generated by the EmWeb/Compiler in ev_code . c : 

EvsArchive ev_archive; 

And If the -c option is specified, the following symbol is generated in 

ey^data.c. 

uinte ev_axciuve_datan ; 

( -m I -mime ) <mlme.types filename> 

The path name to the mime. types configuration file. By default, EmWeb/ 
Compiler looks in $emweb_mike (mime, types) followed by $emweb_home/ 
$EMWEB_MIME {/usz /local /sliaze/emweb/mime. types). 

{ -u | — url ) <archive-url-base-path> 

The base URL path of the generated archive. By default, this is y\ 

(-r|-raw)|(-c|-c). 

The output format of the generated archive data component (raw by 
default). If • - raw is specified, the data component of the archive is written to 
the file ev_data.dat as a raw binary file, if - c is specified, the data 
component of the archive is written to the file ew data.c as a C file that, 
when .compiled, produces an array of data reTerence by the symbol 
ew_axchive_data. Both flags may be specified on the command line to 
cause the generation of both raw and C output files. 

( -c | -output ) 

The prefix for generated files data. tet, data.c, code.c, s tubs. c, and 
pro to . h (\ /evj by default). 

( -s i -stubs ) 

Generate ev_stubs.c file containing stubbed-out versions of form and CGI 
functions normally provided by the application to facilitate rapid prototyping 
and development 

( -C | -no-compress ) 

Disable compression of the archive. (Overrides compiess attribute in 

mime. types and_ACCESS files). 
(-11 -little) 

The byte-order of the generated archive data component By default, a big- 
endian archive Is generated. If --little Is specified, then a little-endian 
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archive is generated. 

( -P j -no-preprocessor ) 

Disable generation of #iine pre-processor directives in generated 
ew_code . c file; normally, these directives are included so that the C compiler 
and debuggers can find the original C in the source HTML documents. This 
option should only be used If your C compiler does not understand the 
'#iine' directive. 

( -q | -quiet } I ( -v | -verbose ) I ( -d J -debug ) 

The logging level. The -quiet options suppresses all but error messages. 
The • -verbose is specified, more logging output is produced. The • -debug 
is specified, still more logging output is produced. The default (non of these 
options specified) includes errors and some warning messages. 

( -v | -version ) 

Displays the EmWeb/Compiier's version. 



Two dashes in a row indicate the end of options. All remaining parameters 
are file and/or directory names. This is optional, as any parameter that does 
not begin with a *-' is assumed to be a file and/or directory name. 
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3.6. Compiler Output 

The EmWeb/Compiier produces the following output files: 
ew_data.dat 

A raw binary file containing the data component of the archive. 
ew_data.c 

If the • -c option is specified at the command line, this file is generated. It 
contains C code that, when compiled, defines an array of octets 
representing the data component of the archive and referenced by the 

global Symbol uintB ev_arcbive_data [] . 
ew_code.c 

A C file that, when compiled, defines the object component of the archive 
referenced by the global symbol cswsArchive) ew_archive. 

ew_proto.h 

This C header file is generated if the archive contains EmWeb HTML forms 
or CGI documents,. The header file defines function prototypes and data 
structures for an application-specific interface between EmWeb/Server and 
application-provided functions responsible for serving and submitting forms 
and/or raw CGI processing. 
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ew_stubs.c 

If the - - stubs option is specified at the command line, this file is generated. 
It contains stubbed-out versions of form and CGI functions normally 
provided by the application to facilitate rapid prototyping and development 
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4. EmWeb/Server 

The EmWeb/Server is written in portable ANSI C and is easily integrated into a wide 
variety of embedded application environments. EmWeb/Server implements the HTTP 
protocol and responds to requests from networked Web browsers with documents stored 
in run-time archives created by the EmWeb/Compiler. 

The following figure illustrates a typical EmWeb/Server device management application. 
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4.1. Application Interfaces 

The Em Web/Server application interfaces are divided into six functional areas including 
system interfaces, network interfaces, document and archive maintenance, 
authorization and security, request context access, and raw CGI. 

Many application interfaces are optional and can be configured out of the EmWeb/ 
Server at compile time. This offers the system integrator flexibility in balancing the trade- 
offs between functionality, memory requirements, and system performance. 

Most application interfaces are provided by the Em Web/Server and are called by the 
application. However, some application interfaces must be provided by the application 
and are called by the EmWeb/Server. Function names beginning with "ews 8 and data 
types beginning with "Ews" are defined by the server for use by the application. Function 
names beginning with "ewa" and data types beginning with *Ewa H must be defined by 
the application for use by EmWeb/Server. 

Status codes returned by the EmWeb/Server to the application are of type EwsStatus 
and are defined as follows (from src/inciude/ev S _def .h): 

/* 

* Status codes returned to the application by EmWeb/Server 
•/ 

typedef enum Evsstatus_e 
{ 

EWS_STATUS_OK, 
EWS~STATUS_BAD_MAGIC , 
EWS~STATUS~BAD_VERSION, 
EWS~STATUS~ALREADY_EXISTS , 
£WS_STATUS_NO_RESOURCES , 
EWS~STATOS_IN_USE , 
EWS_STATUS3*0T_REGISTERED ,. 
EWS_STATUS JJOT~CLONED , 

EWS^STATUS^NOTJFOUKD * 
EWS_STATUS_AUTH_FAILED, 
EWS_STATUS~BAD JsTATE , 
EWS_STATUS_BAiTrEALM , 
EWS_STATUS_FATAL_ERROR, 
EWS_STATUS_ABORTED 
} EwsStatus; 

Status codes returned by the application to the EmWeb/Server are of type EwaStatus 
and are defined as follows (from sic/inciude/evs_def . hj : 

/• 

* Status codes returned to EmWeb/Server by the application 
*/ 

typedef enum EwaStacus_e 
{ 

EWA_STATUS_OK, 
EWAjSTATUS~OK_YTELD , 
EWA STATUS ERROR 
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) EvaStatus; 

41.1. System Interfaces 

The system functional interfaces are further divided into four functional areas including 
initialization, scheduling, memory management, and time-of-day services. 

41.1.1. Initialization and Shutdown 

Before any other application interface function may be used, the EmWeb/Server 
must be initialized. This is accomplished by invoking the following function: 

EwsStatus ewslnit ( void ); 

This function returns ews_statos_ok on success. Otherwise, an error code is 
returned. (ews_statosjwJ^sources is returned if EmWeb/Server was unable to 
allocate memory for internal hash tables, etc.). 

A graceful shutdown of the EmWeb/Server can be accomplished by invoking the 
function below. This causes EmWeb/Server to terminate all outstanding HTTP 
requests and release all dynamically allocated resources. 

EwsStatus evsShutdovn ( void }; 

This function returns ews_statos_ox on success. Otherwise, an error code is 
returned. (There are currently no renditions that cause an error to be returned). 

41.1.2. Scheduling 

The EmWeb/Server is capable of serving multiple HTTP requests simultaneously. It 
may be configured at cornpile-time to use either its own internal real-time scheduler 
or to make use of an external scheduler provided by the applications operating 
system. 

If an external scheduler is to be used, HTTP requests may be multi-threaded if each 
TCP connection Is handled by its own operating system thread. Otherwise, requests 
will be single-threaded. The evsRuno, ewssuspendo and evsResumeo functions 
described below for EmWeb/Server's internal scheduler would not be used. Instead, 
all application <emweb_string> and <ekweb_inclote> code fragments and 
evaFoxmservej* and evaFoxmsubmit_* functions are invoked from the 

evsNetHTTPReceiveC) function. 

If the internal scheduler is to be used, HTTP requests are served from the following 
function: 

EwsStatus evsRun ( void ); 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no renditions that cause an error to be returned). All 
application <emweb_strxng> and <emweb_include> code fragments and 
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ewaFormServe_* and evaFormSubmi t_* functions are invoked from ewsRun ( ) . 

The ewsRuno function processes any outstanding HTTP requests until either all 
requests have been served, or the application requests that Em Web/Server yield the 
CPU as follows. Each time EmWeb/Server sends a buffer of HTTP response data to 
the network via the application-provided evaNetHrrpsend function, the application 
may return the status ewaj5tatusjdk_yield to request that the EmWeb/Server 
relinquish control of the CPU. This will cause the EmWeb/Server to return from the 
ewsRun ( > function immediately, (Note that if the last buffer of the HTTP response was 
transmitted, the EmWeb/Server will close the connection and release any 
corresponding resources before returning control to the application). 

In addition, the internal scheduler gives the application a means to temporarily 
suspend a specific HTTP request each time it invokes application-specific code from 
<bmweb_st*ring>, <emweb_include>, and HTMLform serve and submit functions. The 
application may instruct EmWeb/Server to suspend an HTTP request from the 
application-specific code provided in <emweb_string> and <emweb__include> Ccode 
fragments, and EwaFozmserve_* and EvaFormSubmi c « functions by invoking the 
following function before returning to the EmWeb/Server. 

EvsStatus ewssuspend ( EwsContext context ); 

This function returns ews_status_ox on success. Otherwise, an error code is 
returned (ews_status_bad_state). When the application returns to EmWeb/Server 
after invoking ewssuspend, the EmWeb/Server may continue to process other 
outstanding requests from ewsRunO before returning control to the application. Note 
that the value returned by the application after calling ewssuspend is ignored. The 
application's <emweb_string> or <emweb_include> C code fragment or 
ewaFormsexvej' or ewaFoxmsubmit_* function is re-invoked when the request is 
resumed. This functionality makes It possible to implement proxy servers (i.e. a local 
HTTP request might cause the application to send an IPC message to another 
process and suspend EmWeb/Server processing of this request until an IPC 
response is received). The application can resume a previously suspended request 
by invoking the following function. 

EwsStatus ewsResume ( EwsContext context, EwaStatus status ); 

Status can be either ewa_status_ok or ewa_status_ok yield. If the status is 
ewa_status_ok, then the resumed request may ^scheduled right away (for 
example, this could cause ewsRun to be invoked internally). Otherwise, the 
suspended request is scheduled to run, but is not actually run until control is 
transferred back to EmWeb/Server. This gives the application control over which 
CPU thread processes HTTP requests (i.e. a suspended request may be resumed 
by an interrupt handler for execution later in a polling loop that calls ewsRun). This 
function returns ews_status_ok on success. Otherwise, an error code is returned 
(ews_status_bad_state) . 
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The following function may be Invoked from within the application's <emweb_strinc> 

or <EMWEB_INCLOTE> C COde fragment or ewaFormServe • or ewaFormSubrait * 

function to determine if this is the initial invocation of the application code, or if the 
code is being resumed. 

boolean ewsContextlsResuming ( EwsContext context ) ; 

This function returns true if the application code is being re-invoked after 
ewsResume. Otherwise, this function returns false. 

4.1.1.3. Memory Management 

The EmWeb/Server requires the application to provide simple memory management 
for the allocation and release of temporary data-structures used throughout the 
processing of HTTP requests and maintaining the run-time document archive and 
authentication databases. These functions are equivalent to the POSIX maiioc and 
f ree calls as follows: 

void * ewaAlloc { uintf bytes J ; 
void evaFzee ( void • pointer ) ; 

The ewaAlloc function (or macro) returns a pointer to available memory of at least 
• the specified number of bytes long. or null if no memory is available. The ewaFiee 
function (or macro) returns a block of available memory previously allocated by 

ewaAlloc. ' 

Note: If the EmWeb/Server is unable to allocate memory 
during the processing of a particular HTTP request, the 
request is aborted, all resources related to the request are 
released, and the application's ewaNetHTTPEndo function is 
invoked. Alternatively, the application may implement 
ewaAlloc o so as to block until resources are available using 
external operating system facilities. 

4.1.1.4. Time-of-Day Management 

Some of the optional HTTP/1.0 functionality requires a lime-of-day" for Date:, 
Expires:, and Last-modified: headers. Many embedded systems do not have a 
reliable time-of-day capability, so these features are configurable options in Em Web/ 
Server. To take advantage of these features, the application must provide the 
following function (or macro): 

const char • ewaDate ( void ) ; 

This function should return the current time (GMT) in one of the following two 
formats: " 

RFC1 123: (Preferred) 

Fri, 08 Jun 1996 08:57:26 GMT 
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RFC850: 

Friday, 08-Jun-96 08;57:28 GMT 

4,1 .2. Network Interfaces 

The EmWeb/Server relies upon a pre-existing TCP/IP protocol stack available in the 
target software environment The interface between the application's TCP/IP protocol 
stack and the EmWeb/Server is event driven. This approach makes it possible to port 
EmWeb/Server to a wide variety of software environments. 

4.1.2.1. Network Buffer Management 

The EmWeb/Server design assumes that the application maintains data buffers for 
the reception and transmission of TCP data. 

Buffers can be uniquely identified by an application-defined buffer descriptor. No 
assumptions are made about the actual structure of the buffer descriptors or their 
relationship to the data. For example, a buffer descriptor could be an index into a 
table, a pointer to a structure (either contiguous or separate from the data 
represented), etc. The application is responsible for defining the appropriate type for 
EvaNetBuf f er and a value for ewa_net_buffer_null. 

Buffers can be chained together. Given a buffer descriptor, EmWeb/Server must be 
able to get or set the "next buffer in the chain" field. This is done by the 

ewaNetBufferNextSet and ewaNetBuf ferNextGet functions (or macros). Note that 

the buffer chain is terminated when the next buffer value is ewaj*et_buffer_null. 

EvaNetBuf fer ewaNetBuf f erNextGet { EwaNetBuf fei buffer ) ; 

void ewaNetBuf ferNextSet ( EwaNetBuf fer buffer/ EwaNetBuf fei next ); 

Given a buffer descriptor, EmWeb/Server can determine the start of data in the 
buffer. Additionally, EmWeb/Server may change the start of data in the buffer 
(EmWeb/Server only moves the pointer to the data upward (increments)). This is 

done by the ewaNetBuf ferDataGet and ewaNetBuf ferDataSet functions (ormaCTOS). 

uint8 * ewaNetBuf ferDataGet ( EwaNetBuf fer buffer } ; 

void ewaNetBuf ferDataSet ( EwaNetBuf fer buffer, uints *datap ); 

Given a buffer descriptor, EmWeb/Server can determine the size of contiguous data 
in the buffer. Additionally, EmWeb/Server may change the size of the buffer 
(EmWeb/Server only changes the size of the buffer downward (decrements)). This 

is done by the ewaNetBufferLengthGet and ewaNetBuf fer LengthSet functions (or 

macros). 

uintf evaNetBufferLengthGet ( EwaNetBuf fer buffer); 

void ewaNetBuf ferLengthset ( EwaNetBuf fer buffer, uintf length >; 
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EmWeb/Server may allocate a single buffer by invoking the ewaNetBuff exAiioc 
function (or macro). The application may return a buffer of any size to EmWeb/ 
Server. The size of the buffer must be initialized to the number of bytes available in 
the buffer for EmWeb/Server. if no buffers are available, this function returns 
ewajjetjbotf£r_nuix. Additionally, EmWeb/Server may release a chain of one' or 
more buffers by invoking the ewaNetBuff eipiee function (or macro). 

EwaNetBuff er ewaNetBuff exAlloc ( void ) ; 
void ewaNetBuffexFxee (EwaNetBuffei buffet); 

Note: If the EmWeb/Server is unable to allocate a network 
buffer during the processing of a particular HTTP request, the 
request is aborted, all resources related to the request are 
released, and the application's ewaNetHTTPEndo function is 
invoked. Alternatively, the application may implement 
ewaNetBuff erAiioc o so as to block until resources are 
available using external operating system facilities. 



4.1.2.2. TCP/IP Interfaces 

The application is responsible for listening to the HTTP TCP port (80) for connection 
requests. When an HTTP TCP connection request is received, the application 
accepts the TCP connection on behalf of EmWeb/Server and invokes the following 
function: 

BwsContext ewsNetHTTPStart { EwaNetHandle handle >; 

This function returns a new context handle which the application is expected to use 
when referencing this HTTP request for future operations. The value 
ews^contktnull is returned on failure (e.g. no resources available to handle the 
new request). The handle parameter is application-defined and is returned to the 
application unchanged by the EmWeb/Server in other network Interface calls as 
illustrated below. The handle is also made available to <emweb stkino and 

<EMWEB_INCLUDE> C code fragments and evaFormServe * and evaFoxmSubmit * 

application functions by invoking the following function: 

EwaNetHandle ewsContextNetHandle ( EwsContext context ); 

At anytime, the application can abort an uncompleted HTTP request by invoking the 
following function: * - 

EwsStatus ewsNetKTTPAboit ( EwsContext context ); 

This function is typically invoked by the application to notify EmWeb/Server that the 
corresponding TCP/IP connection has been disconnected. The function returns 
svsjstxjvsjzk on success. Otherwise, an error code .'is returned. (There are 
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currently no conditions that cause an error to be returned). 

As data buffer(s) are received from the network on a TCP connection corresponding 
to an HTTP request, the application passes these buffers to the EmWeb/Server by 
invoking the following function. 

EwsStatus ewsNetHTTPReceive (EvsContext context, EwaNetBuf f ex buffer); 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). The 
buffer parameter describes a chain of one or more buffers containing raw TCP data. 
The structure of the buffers is determined by the application, and the application 
provides EmWeb/Server with functions to manipulate these buffers as defined 
previously. Note that EmWeb/Server takes responsibility for releasing received 
buffers when they are no longer needed, and may hold on to buffers containing 
certain HTTP request headers for the duration of the request. 

When EmWeb/Server has assembled one or more buffers for transmission, it 
invokes the following function (or macro) which must be provided by the application: 

EwaStatus ewaNetHTTPSend { EwaNet Handle handle, EwaNetBuf fez buffer >; 

This function transmits (and then releases) a chain of one or more network buffers 
and returns ewa_status_ok or ewa_status_ok_yield on success, or 
ewa_status_error on failure. If the application returns ewa_status ok, EmWeb/ 
Server will continue processing outstanding requests in a round-robinTashion. If the 
application returns ewa_status_error, EmWeb/Server will abort the current request 
(as if ewsNetHTTPAborto was called) and continue processing any other outstanding 
requests. The application returns ewa_status_ok_yield to request that EmWeb/ 
Server give up the CPU. In most cases, ewaNetHTTPSend o is called for each buffer's 
worth of HTTP response data generated by the EmWeb/Server. Thus, the CPU used 
by the server can be throttled by adjusting the buffer size available to the server and 
using the ewa_sta?us_ok_yield return code. (See 4.1.1.2. Scheduling, page 29). 
Note that use of this return code requires that the application eventually either 
reschedule processing of the request by invoking ewsRun, or abort the request by 

invoking ewsNetHTTPAboit. 

The application may signal the EmWeb/Server with flow control events to indicate 
congestion on an outbound TCP connection. If a TCP connection's transmit window 
is full, the application may call the following function at any time: 

EwsStatus ewsNetFlowControl ( Ewscontext context ) ; 

This will cause the EmWeb/Server to temporarily suspend processing of the request. 
When the TCP connection's window opens again, the application may invoke the 
following function at anytime to notify EmWeb/Server that processing of the request 
may continue: 
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EvsStatus ewsNetUnFlovControl ( EvsContext context) ; 

If ewsuetFiowcontroio is called from the evaNetHrrpsend o function, then the 
application is responsible for transmitting the current buffer. However, 
evaNetHrrpsendO will not be called again until the application has called 
ewsNetunriowcontioio. Note that if evsNecriovcontroio is invoked from outside 
ewaNetHTTPsendo, then EmWeb/Server may call evaNetHrrpsend o once before 
suspending the request In any case, the application should be prepared to receive 
notification of request completion as described below. 

When the EmWeb/Server has completed processing an HTTP request, or if the 
application aborts an outstanding HTTP request by invoking ewsnetHrrPAborco , it 
invokes the following function which must be provided by the application: 

EvaStatus evaNetHTTPEnd ( EwaNetHandle handle ) ; 

This function should close the TCP connection corresponding to the request and 
return ewajstatusjhc or ewa_statos_ox_yield on success or ewa status error on 
failure. Note that returning ewa_status_ok_yieu) causes EmWeb/Server to give up 
the CPU. Otherwise, EmWeb/Server may continue processing other HTTP requests 
in progress. 

If persistent connections are used, it is possible that several HTTP requests will be 
handled over a single TCP/IP connection. For some applications, it is necessary to 
reset application-specific state information and to release application-specific 
dynamic resources after each HTTP request. The following function may be 
provided by the application for this purpose: 

void evaNe tHTTPCleianup ( EwaNetHandle handle ) ; 

This function must be provided by the application or defined as a empty macro. It is 
invoked by EmWeb/Server when a request completes, allowing the application to 
reset any processing state stored in the network handle. Note that for persistent 
connections, this routine may be called several times for the same connection, as 
one connection can be used for multiple requests. This routine will be called before 

. evaNe tHTTPEnd { ) is invoked. 

The EmWeb/Server must have access to an application-provided null-terminated 
character string representing the HTTP network location (e g 
"www.agranaLcom:80 ,, . Note that the host name (left of the ':') may be a dotted 
decimal IP address. Also note that the '^port-number^ may be omitted if the 
standard HTTP TCP port #80 is used. This string is returned by the following 
application-provided function (or macro). 

const char ■ evaNe tLocalHostName { EwsContext context ); 
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4.1.3. Document and Archive Management 

The EmWeb/Compiler generates an archive of one or more documents. Documents 
can be HTML files, JAVA programs, graphical images, or any other information 
resource addressable by a URL Archives may be independently loaded or unloaded 
into the EmWeb/Server. 

In most applications, the entire set of available documents are compiled into a single 
archive and loaded at boot time. However, some applications may desire to 
dynamically load archives at run-time as needed in order to reduce memory 
requirements. In fact, applications may implement a scheme similar to virtual memory 
page swapping under some operating systems to cache an active set of documents in 
memory while storing other documents in a secondary storage area. Such a 
secondary storage area could be in FLASH memory, disk, or on a remote server using 
TFTP or other protocols to load documents at run-time. 

An EmWeb archive consists of two components. First, there is the archive data 
component containing the database of compressed documents, information about 
how to construct dynamic documents at run-time, access controls, etc. Second, there 
is the archive object component containing the run-time object code used for the 
construction of dynamic documents, etc. 

Operating systems supporting the run-time loading and linking of object code may off- 
load both the data and object archive components to a secondary storage area. 
Otherwise, only the data components are off-loaded while the object components are 
statically linked into the run-time executable image. 

Each archive contains an archive descriptor in the object component. The archive 
descriptor is referenced by a public symbol generated by the EmWeb/Compiler, 

4.1.3.1. Installing and Removing Archives 

In order to activate an archive at run-time, the application must invoke 
ewsDocumen tins taiiAi chive with parameters indicating the address of the data 
component and the archive descriptor of the object component. 

EwsStatus ewsDocumentlnstallArchive 

( EvsArchive descriptor, const uint8 *datap ); 

This function may return one of the following status codes: 

EWS_STATUS_OK The archive vas installed successfully 

EWS_STATUS_BAD_MAGIC The data or object portion of the archive is 

invalid or corrupt. This ©ay happen if the 
EmWeb/Server is configured for a big-endian 
archive when the EmWeb/Compiler generated a 
little-endian archive, or vice versa. 

EWS_STATUS_BAD_VERSION The archive generated by the EmWeb/Compiler 

is not understood by the EmWeb/Server . 

EWS_STATUS ALREADY EXISTS The archive has already been installed. 
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EWS_STATUS_BMJSE The archive contains a document vith a URL 

that has been previously loaded from a 
different archive. 

EWS_STATUS_N0_RES0URCES Insufficient dynamic memory is available to 

install the archive. 

The archive maybe deactivated by invoking evsDocumentRemoveAr chive. 



EwsStatus ewsDocumentRetnoveArchive < EwsAxchive descriptor ); 

These functions return ews_status_ok on success. Otherwise, ew_status in use is 
returned Indicating that the archive contains documents that are either~being 
processed by outstanding HTTP requests or that have been cloned to other URLb. 

The fixed data component of an archive contains the name of the archive and the 
date it was created by the EmWeb/Compiler. These values may be retrieved as 
follows: 

const char * ewsDocumentAxchiyeName ( const uintB *datap ); 
const char * evsDocumentArchiveDate < const uinte *datap ) ; 
const char * evsDocuoentArchiveDatei036 ( const uint8 *datap ); 

4.1.3.2. Demand Loading 

In order to implement on-demand archive loading, the application may register 
document URLs with the Em Web/Server which are valid but not loaded. This is done 
by invoking the following function: 

EwsDocument 

evsDocumentRegister {const char *url, EvaDocumentHandle handle); 

This function returns an EmWeb/Seiver document descriptor of type EvsDocument, 
or ewsjdocumeotjnull on error. The handle is an application-defined value passed 
back unchanged to the application in ewaDocumentFauit as shown below. 

If a registered document is requested by a Web browser, then EmWeb/Server 
notifies the application by invoking the following application-provided function: 

EvaStatus 

ewaDocumentFauit ( EwsContext context, EvaDocumentHandle handle ); 

At this point, the application may load a new archive (possibly removing a previously 
installed archive to make room). When the archive containing the page is installed, 
the EmWeb/Server automatically completes processing the request when the 
archive is loaded. The request can be aborted either immediately by returning 
ewa_statos_error from the ewaDocumentFauit function, or by invoking 

evsKetHTTPAbort. 

Once a document is registered, there is no need to re-register it in the event that. the 
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corresponding archive Is removed. EmWeb/Server remembers that the document 
has been registered as dynamically loadable. However, the application may de- 
register a document by invoking the following function: 

EwsStatus evsDocumentDexegister ( EwsDocument document ) ; 

This function returns ews_status_ok on success. Otherwise, ews_status_in_use is 
returned indicating that the document was cloned or not registered. 

4.1 .3.3. Cloning 

Documents may be cloned and assigned to a new URL This allows multiple 
instances of a document to exist while minimizing the storage requirements. An 
application-specific handle can be used to identify an instance of a document from 
the request context. 

The application clones a document by invoking the following function: 

EwsDocumentevsDocument Clone 
( const char *baseurl, const char *newurl # EwaDocumentHandle handle ); 

This function returns a document descriptor for the clone, or ews document null on 
error. 

The cloned document may be removed by invoking the following function: 

EwsStatus evsDocumentRemove { EwsDocument document ) ; 

This function returns one of the following status codes: 

The document was successfully removed 
The document is not a clone. 
The document is itself cloned. The clone of 
the clone must be removed first. 

All clones created from documents in an archive must be removed before the archive 
can be removed. 

Note that the application's document handle is made available to the application In 
the HTTP request context by invoking the following function: 

EwaDocumentHandle ewsContextDocumentHandle ( EwsContext context ) ; 

If the document corresponding to the context was not cloned or registered by the 
application, then this function returns ewajdocument_handle_null. 

4.1.3.4. URL Rewriting 

In some applications, it may be desirable to translate between URLs advertised to 
the outside world and URLs configured in the archive. The optional URL hook feature 



ews_status_ok 
ews~statos3iot_cloned 
ews~status in use 
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provides the application with an opportunity to rewrite a requested URL before 
EmWeb/Server looks up the URL in its archive database. The following function (or 
macro) may.be provided by the application for this purpose: 

chai * ewaURLHook ( EvsContext context, chai * url ); 

This function passes the requested URL and request context to the application. The 
application may simply return url if no rewriting is desired, or it may return an 
absolute local URL to substitute. The returned URL is looked up in the archive and 
served as if requested directly. If the application returns hull, the request is aborted. 

This functionality is Intended to allow the application to select a subdirectory of 
documents based upon requested language, content encodings, and other 
information available from the request context. 

Note that this function may rewrite and return any portion of the uri string parameter 
(provided that the string's length is not increased), or return a completely different 
string buffer instead, if a different buffer is used, the server copies the value 
immediately. 

4.1.3.5. Document Data Access • 

in some applications, it may be desirable to access the content of a file pointed to by 
a URL directly (e.g. data files used by CGI scripts, etc.). The following function is 
optionally provided by the EmWeb/Server to the application for this purpose: 

Evss tatus evsDocumentData 

( const char * uxl, uint32 •bytesp, const uint8 ••datapp ); 

This function looks up the requested URL and, if found, updates *bytesp and 
•datapp with the length and pointer to the start of raw data in the file. (Note that the 
data is compressed if compression is enabled). Since EmWeb employs a proprietary 
compression technique, the application should specifically disable compression of 
files it wishes to access this way by using the nocompress attribute in the appropriate 
_access file (see 3.4. ^ACCESS Rles, page 22). This function returns ews_status_ox 
on success, or ewsjstatos_not_found on failure. 

4.1 A Authentication and Security 

HTTP Authorization techniques are discussed in the HTTP specifications (see 7. 
References, page 87). Knowledge of these principles is essential for correct use of 
these authorization interfaces. 

One or more HTML documents can be associated with a single "realm". A realm is a 
case-sensitive ASCII string that defines a "protection space" for the associated 
document(s). 

Each realm may have zero or more authentication entries associated with it. If a realm 
has no authentication entries, then documents in that realm -are not accessible. 
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A client that attempts to access a document associated with a non-null realm is 
required to authenticate Itself. To authenticate, the client must send authentication 
parameters valid for at least one authentication entry for that document's reaim. 
Clients that do not authenticate are denied access to the requested document. 

For example, assume a realm exists called "foo". It has three authentication entries 
associated with It (two using the "basic cookie" scheme defined in the HTTP/1.0 
specification, and one using the "digest" scheme defined in the HTTP/1.1 
specification): 

REALM: M foo" 

Authentication Entry 1: 
Type: "basic" 

parameters: Usexname- "userl " 
Password- "guest" 
EwaAuthHandle: application 1 s entryl identified 

Authentication Entry 2: 
Type: "digest" < 
parameters : Username» M user2 M 

Password* "837I8U9" 
DigescRequired-FALSE 
EwaAuthHandle: (application' s entry2 identifiex> 

Authentication Entry 3: 
Type: -basic" 

parameters: Username- "Sinclair" 

Password* "baby Ion" 
EwaAuthHandle: application' s entry3 identifier > 

When a ciient attempts to access a document associated with realm "foo", it needs to 
authenticate against one of the above entries. Which one the ciient authenticates 
against is at its discretion. 

When a ciient does authenticate against one of the above entries, the EwaAuthHandle 
for that entry is stored in the current context for the HTTP request (Ewscontext), The 
datatype of this EwaAuthHandle is implementation-defined. 

The following types are defined for the authorization application interface (from src/ 

include/ews_au th . h) : 
/• 

* Defines the authorization schemes supported by the EmWeb server. 

* New schemes will be added as they are supported. 
•/ 

typedef enum 
[ 

ewsAu thSchemeBasic , 
ewsAuthSchemeDiges t , 
ewsAuthSchemeManualBasic, 
ewsAu thSchemeManua iDiges t , 
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ewsAuthMaxScheme /* count of supported schemes */ 

} EwsAuthScheme; 

* this structure defines parameters for all the supported 

* authorization types. New parameters will be added in 

* to this structure in the future 
V 

typedef union 
{ 

#ifdef EW_CONFIG_OPTION_AUTH_BASIC 
struct 
{ 

char *userName; 
char -password; 
) basic; 

tfendif /* EW_CONFIG_OPTI ON AUTH BASIC V 
#ifdef EW_COOTTG_OPTION_AUTH_DIGEST 

# struct 
{ 

char *usexName; 
char -password; 

# ifdef EW_CONFIG_OPTION_AUTH_DI GEST_M 

boolean digestRequiied; /* require message data verification */ 

# endif /* ew_config_option_authjdigest_m */ 
} digest; 

#endif /* EW_CONFIG_OPTION_AUTK_DIGEST */ 

char reserved!; 
) EwsAuthParameters; 

h 

* This structure represents a single authorization entry. 
•/ 

typedef struct 
{ 

EwsAuthScheme scheme; 
EwsAuthParameters params; 

EwaAuthHandle handle; /* user defined •/ 
} EwsAuthorization; 

An authorization entry may be created by invoking the following function: 

EvsAuthHandle evsAuthRegister 

( const char *xealm, const EwsAuthorization 'authorization ); 

This function returns an EmWeb/Server authorization handle which corresponds to the 
. authorization entry, or ews_aothjhandle_null on failure. The entry contains the triplet 
(authorization scheme (e.g. basic cookie), scheme-specific parameters (e.g. user and 
password), application-specific authorization handle). 

The application-specific authorization handle corresponding to the authentication 
validating a particular HTTP request is available from the context as follows: 



Copyright 0 1997Agranat Systems, Inc. Page 41 

SUBSTITUTE SHEET (RULE 26) 



REV. 6y20/97 



WO 98/06033 

EmWeb™ Functional Specification 



-70- 
Confidentiat 



PCT/US97/13817 



EmWeb/Server 



EvaAuthHandle evsContexcAuthHandle ( EvsConcext context ) ; 

The application may remove a previously registered authorization handle by invoking 
the following function: 

EwsStatus evsAuthRemove ( EwsAuthHandle authorization ) ; 

This function returns ews_statos_ok on success. Otherwise, an error code is returned 
(there are presently no conditions that result in error). 

By default, documents assigned to a non-null realm are protected and may only be 
accessed by authorized users. It may be desirable to enable or disable a realm's 
access controls. The following function disables access control for a realm making 
documents assigned to the realm accessible to everyone. 

EwsStatus ewsAuthRealmDi sable ( const char * realm ) ; 

This function returns ews_status_ok on success, or ews_status_badjrealm if the realm 
was not defined by any loaded archives. 

The following function enables access control for a realm making documents assigned 
to the realm protected. Protected documents may only be accessed by authorized 
users. 

EwsStatus evsAuthRealmEnable ( const char * realm ) ; 

This function returns ews_status_ok on success, or ews_status_badjiealm if the realm 
was not defined by any loaded aTchives. 

The following function (or macro) must be provided by the application. The function is 
invoked by EmWeb/Server to get a realm qualifier string from the application. The 
qualifier string is concatenated with the base realm name in authentication protocol 
messages such that browsers may differentiate between realms of the same name 
appearing in multiple servers. 

const char *evaAuthRealmQualif iei ( void ) ; 

The application would typically return the string ■©hostname", where hostname Is the 
server's local host name or IP address. The application may return null if no qualifier 
is desired. 

4.1 At. Basic Authentication 

The Basic authentication scheme requires the browser client to transmit a Base64 
encoded usemame and password to the server for authentication. While no less 
secure than SNMP v1 , Basic authentication Is vulnerable to network monitoring and 
replay attacks. 

The authentication parameters for Basic authentication are simply the usemame and 
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password represented as null-terminated character strings. 
4.1.4.2. Manual Basic Authentication 

For some applications, it may be impossible to obtain the Basic authentication 
usemame/password pair prior to receiving requests for a document. Instead, the 
Basic authentication username/password may be stored in a remote secure 
database. This database would need to be queried for the username/password as 
each request requiring authentication is processed. 

In order to support this, a special type of authentication scheme is defined: 
ewsAuthSchemeManualBasic. This scheme is available only if the build option 
ew_config_option_auth_mbasic is defined. Once defined, the application must 
provide the following interface: 

boolean ewaAuthcheckBasic (EwsContext context 

, const char *iealm 
, const char *basicCookie 
, const char *userName 
, const char ^password } ; 

The evsAuthschemeManuaiBasic scheme can be registered for any realm by using 
the ewsAuthRegister function. The scheme field of the EwsAuthorization parameter 
must be set to ewsAuthschemeManuaiBasic, and the application handle can be set in 
the handle field. The params field is not used by the manual basic scheme. Manual 
basic can only be registered once per realm. If there are "non-manual" 
(ewsAuthschemeBasic) Basic authorization entries registered to the same realm as a 
manual Basic entry, the "non-manual" authorization entries will be given preference. 
If no "non-manual" authorization entries match the request, then ewaAuthcheckBasic 
will be called. 

The EmWeb/Server will invoke the application's ewaAuthcheckBasic function when 
authenticating a request for a realm protected by the manual basic scheme, unless 
a "non-manual" basic authorization entry matched. The application's 
ewaAuthcheckBasic function must now determine whether or not the authorization is 
valid. This function is passed the context, requested document's realm, and the 
base64-encoded basic cookie from the Authorization header (as specified in RFC 
2068). If the build option ew_config_option_auth__mb^ic_decode is defined, then 
userName and password will point to the usemame/passwoTd strings decoded from 
the basiccookie, otherwise these pointers are null. All strings are null terminated, 
and should not be modified by the application. 

The return value from ewaAuthcheckBasic determines how the server will respond to 
the request. If false is returned, access will be denied, If true is returned, access 
will be granted . 

Optionally, the application can suspend the context from within ewaAuthcheckBasic 
using ewssuspend. EmWeb/Server will ignore the return value in this case. When the 
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context Is later resumed by evsResume, the ewaAuthcheckBasic function will be 
reinvoked by EmWeb/Server. 

The application may abort the context from within ewaAuthcheckBasic by calling 

evsNetHTTPAbort. 

4.1 A3. Digest Authentication 

The Digest authentication scheme challenges the browser client using a "nonce" 
value. The client responds with a valid cryptographic checksum of the usemame, 
secret password, the given nonce value, the HTTP request method, and the 
requested URL This avoids sending the secret password over the network- 
Furthermore, by generating unique nonce values, the server can make replay and 
other forms of attack impractical. 

Note: EmWeb's digest authentication support is derived from 
the RSA Data Security, Inc. MD5 Message-Digest Algorithm. 

Note: Digest authentication is currently an internet proposed 
standard and is not yet supported by many browsers. 

The authentication parameters for Digest authentication include the usemame and 
password represented as null-terminated character strings. In addition, one 
additional boolean parameter is defined as follows: 

digestRequired 

If true, the EmWeb/Server will require that the client provide a valid 
message digest to prevent forgery of the request message. This requires 
significantly more computation and is not supported by most browsers. 

The application is required to define the application-specific structure called 
EvaAuthNonce. The EvaAuthNonce structure is application-specific and contains 
parameters to be used in calculating (via MD5 hash of the structure's contents) a 
unique nonce value. We recommend including the client's IP address, timestamp, a 
server-wide secret key, and any other random bits the application desires. 

Two additional functions must be provided by the application for the generation and 
verification of nonce values as follows: 

First, the evaAuthNoncecreate o function is called by EmWeb/Server in response to 
an unauthenticated request for a document to request that the application initialize 
the EvaAuthNonce structure. 

void 

e wa Au thNonceCr ea te 

(EvsContexc context 
, const char *xealni 
/EwaAuthNonce *noncep ) ; 
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The application should initialize the EwaAuthNonce structure. The request context 
and realm are provided as inputs. For example, a typical application could read the 
application-specific network handle from the request context to determine the clients 
IP address. 

Second, the evaAuthNoncechecko function is called by Em Web/Server in response 
to a client's request to authenticate against a nonce value previously initialized by 

the application in evaAuthNonceCreate {) . 

typedef enuxn EvaAuthNonceStatus_e 
{ 

evaAuthNonceOK, /• nonce value valid for request */ 

evaAuthNonceLastOK, /* nonce value valid, but won't be again */ 

evaAuthNonceStale, /« nonce value is stale, generate new nonce */ 

ewaAuthNonceDenied /* nonce value is invalid */ 
) EvaAuthNorxceStacus; 

EwaAu thNonceS ta tus 
ewaAuthflonceCheck 

(EwsContext context ■ 

, const char * realm 

,EvaAuthNonce *noncep,uintf count ); 

This function is called by EmWeb/Server to verify that the nonce is valid for the 
current request. The count parameter indicates the number of times this nonce has 
been used previously (i.e. zero on the first call). The application may decide to 
accept the nonce by returning evaAuthwonceox or ewaAuthNonceLastoK. The 
ewaAuthNonceLastoK is used to signal to the server that the nonce value is valid this 
time, but will not be valid if used again. The server uses this information to generate 
a new nonce and pass a next nonce value to the browser to be used on the next 
request. Otherwise, the application may decide to expire the nonce (because it has 
been used too many times, because too much time has gone by since it was created, 
or any other reason that the application decides) by returning ewaAuthnoncestaie, or 
refuse to authenticate (because the client IP address doesn't match) by returning 

ewaAuthNonceDenied. 

4.1.4.4. Manual Digest Authentication 

For some applications, it may be impossible to obtain the digest authentication 
username/password pairs prior to receiving requests for a document. Instead, the 
digest authentication username/password may be stored on a remote server. This 
server would heed to be queried for the username/password as each request 
requiring authentication is processed. 

In order to support this, a special type of authentication scheme is defined: 
ewsAuthschemeManuaiDigest. This scheme is available only if the build option 
EW.CONF2 g_option_aoth_mdi gest is defined. Once defined, the application must 
provide the following interlace: 
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boolean ewaAuthCheckDigest ( EwsContext context 

, const char •realm 
, const EwaAuthNonce *noncep 
, const char "userName 
,const char "digest >; 

The evsAuthschemeManuaiDigest scheme can be registered for any realm by using 
the ewsAuthRegister function. The scheme field of the EvsAuthoiization parameter 
must be set to ewsAuthschemeManuaiDiges t, and the application handle can be set in 
the handle field. The params. digest. digestRequired flag may be used if the 
ew_config_optionauth_digest_m build option is defined. All other parameters^are 
noTused by the manual digest scheme. Manual digest can be registered once per 
realm. If there are "non-manual" (ewsAuthschemeDigest) digest authorization entries 
registered to the same realm as a manual digest entry, the "non-manual" 
authorization entries will be given preference. If no 'non-manual" authorization 
entries match the request, then ewaAuthCheckDigest will be called. 

The EmWeb/Server will invoke the application's ewaAuthCheckDigest function when 
authenticating a request for a realm protected by the manual digest scheme, unless 
a "non-manual" digest authorization entry matched. The application's 
ewaAuthCheckDigest function must now determine whether or not the authorization 
is valid. This function is passed the context, the requested document's realm, the 
nonce associated with this request, and the usemame as it appears in the request. 
AH strings are null terminated, and should not be modified by the application. 

ewaAuthCheckDigest returns a boolean status that determines how the server will 
respond to the request. If false is returned, access will be denied. If true is returned, 
the ^digest parameter has been set to a null terminated string containing the ASCII 
string representation of the MD5 checksum of the usemame, realm, and password 
strings. This is referred to the H(A1) value in RFC 2069. For example, if the 
username is "user', password is "password", realm is •foo_reaim\ then 'digest 
should be set to the string representation of MD5( usenfoo_reatm:password ), which 
would be: 

♦digest • "eafd9339d0ll4895926c24ec79af72ll*' 

The -digest value is used by the server to validate the response digest and entity- 
digest that are present in the request's Authorization header. If the validation does 
not pass, access will be denied. The memory used by the -digest value will remain 
referenced by the server until the context of the request is freed. 

Optionally, the application can suspend the context from within ewaAuthCheckDigest 
using ewssuspend. The return value will be. ignored. When the context Is later 
resumed with ewsResume, the ewaAuthCheckDigest function will be reinvoked. 

The application may abort the context from within ewaAuthCheckDigest by calling 

ewsNetHTTPAbort. 
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4.1 .4.5. Application Security Verification 

Some applications may provide their own proprietary form of client authentication, 
These proprietary methods will vary from application to application. For example, an 
application could use the client's IP address to restrict the client's access to certain 
realms. 

EmWeb provides a generic interface that allows an application to provide any 
proprietary checks on the request context and requested realm. This interface 
allows the application to deny service to the client if so desired. 

This interface is made available by defining the fw_config_option autk verify 
build option. The application must then provide the following interface? 

boolean evaAuthVerifySecurity ( Evscontext context 

, const char *realm ); 

This function is called by EmWeb/Server after the current request has passed the 
standard authorization procedures described above. For example, if basic 
authentication is enabled on a realm, evaAuthveii f ysecur i ty will be called only after 
the basic authentication successfully completes. If digest authentication is used, 
then ewaAuthverifysecuiity is called after the response digest is successfully 
verified, but before the entity-digest is checked (if the 
£w_config_optioh_auth_digest_m build option is turned on). 

ewaAuthverifysecuiity is passed the current context, and a pointer to a null 
terminated string containing the realm. The application can allow the request to 

Complete by returning TRUE from evaAuthVerifySecurity. If evaAuthVerifySecurity 

returns false, the request is denied access. 

ewaAuthverifysecuiity is provided only as a secondary security mechanism, and 
can only be used in conjunction with a defined standard security scheme, such as 
basic or digest. 

Optionally, the application can suspend the context from within 
ewaAuthveiifysecurity using evssuspend. The return value will be ignored. When 
the context is later resumed, the ewaAuthver if ysecuri ty function will be reinvoked. 

The application may abort the context from within ewaAuthverifysecuiity by calling 
ewsNetHTTPAbort. 

4.1 .4.6. Document Realm Assignment 

The authentication realm of a document is typically determined from the access 
configuration files by the Em Web/Compiler. However, it may be desirable to change 
the document's realm assignment at run-time. The following function is optionally 
provided by the EmWeb/Server to the application for this purpose: 

EwsStatus evsDocumentSetRealzn ( const char *uil, const char •realm ) ; 
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This function returns' ews_status_ok on success, or ewsjstatos_kot_found if the 
specified local URL is not installed, or ews_status_no resources 7f insufficient 
resources were available to create a new realm. 

4.1.5. Request Context Access 

Each HTTP request received by the EmWeb/Server is assigned a unique context. A 
context handle of type Ewscontext is first returned to the application from the 

evsNetKTTPS tart function. 

Application code responsible for the run-time content of HTML documents (Le. C code 
fragments from <emweb_strihg> and <emweb_include>, HTML form processing 
functions evaFormserve_* and evaFonnsubmit_*, and raw CGI interface functions 
evaCGistart_* and evacciData_*) have access to the corresponding HTTP request 
context. In the case of <emweb_string> and <emweb_include> C code fragments, the 
context is available from the local variable symbol ewscontext. In the case of the form 
and raw CGI processing functions, the context is passed as a parameter. 

Several context access functions are defined which can be called by the application to 
extract information about the current context. For example, the function: 

EwaNetHandle ewsContextKetHandle ( Ewscontext context ) 

Returns the network handle corresponding to the HTTP context that was passed by 
the application to the EmWeb/Server in the ewsNetHrrpstaxt function. The following 
table lists these context access functions: 



Context Access Function 


Description 


evsCon tex tN e tHandle 

ewsContextKetHandle ( Ewscontext context ) ; 


Returns the network handle that 
was passed by the application to 
EmWeb/Server in the evswetHTTP- 
start function. 


EwaDocumentHandle 

ews Con tex tDocumen tHandle 

( Ewscontext context ) ; 


Returns the document handle that 
was passed by the application to 
EmWeb/Server in either the ews - 

DocumentRegister or ewsDocument • 

clone functions, or 

EWAJDOCUMENT_HANDX.E — NULL. 


EwaAuthHandle 
ewsContextAuthHandle 
( Ewscontext context ) ; 


Returns the authorization handle 
that was passed by the application 
to EmWeb/Server in the ewsAu- 

thRegister function, or 
EWAJUrTH_HANDLE_NULL. 
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Context Access Function 


Description 


boolean 

ewsContextlsResuming 
( EwsContext context ) ; 


Returns true if this is the first appli- 
cation call-out after a suspended 
request was resumed by calling 
evsResume. Otherwise, returns 

FALSE, 


uint32 

ewsContextltexations 
( X.W5L. oil text. conceAt / ; 


Returns the Iteration count (start- 
ing with zero) to an 

<EMWEB — STRING > Or 

<emweb_include > C code fragment 
with the emwebjtterate attribute 
specified. 


uintf 

ewsContextDate ( EwsContext context, 
char «datap, uintf length ); 


Copies the HTTP Date : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextPxagma ( EwsContext context, 
chax *datap, uintf length ) ; 


Copies the HTTP pxagma: header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextFiom ( EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP From: header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

e vs Con t ex tl f Modi f i eds i nee 

( EwsContext context, char * da tap, uintf 

length ) ; 


Copies the HTTP if -modified- 
since: header into the buffer pro- 
vided by the application and 
returns the actual number of bytes 
present. 


uintf 

evscontextRefexex ( EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP Ref exer : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewscontextusex Agent ( EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP Usex- agent: 

value into the buffer provided by 
the application and returns the 
actual number of bytes present. 
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Context Access Function 


Description 


uintf 

evsContextHost { EwsContext context, chai 
•datap, uintf length ); 


Copies the HTTP Host: value into 
the buffer provided by the applica- 
tion and returns the actual number 
of bytes present. 


uintf 

evsCGIServeiProtocoK EwsContext context, 
char * da tap, uintf length ) ; 


uopies me n i i r server proiocoi 
"http/i . o" or "http/o . 9 n into the 
buffer provided by the application 
and returns the actual number of 
bytes present. 


uintf 

ewscGiKCQues twe tnoQ \ twsuwnweAL context/ 
chai *datap, uintf length ); 


Copies the HTTP request method 

ft ft n it #t n • * _ » * _ 

get , "head , or "post" into the 
buffer provided by the application 
and returns the actual number of 
bytes present. 


const char * 

ewsCGIPathInfo( EwsContext context ); 


Returns pointer to CGI extra path 
information if present, or NULL 


const char * 

evsCGIScziptName( EwsContext context ); 


Returns pointer to URL base path 
string. 


uintf 

ewsCGIOueryString( EwsContext context, char 


Copies the URL query string into 
the buffer provided by the applica- 
tion and returns the actual number 
of bytes present 


uintf 

evsCGIContentType( EwsContext context, char 
«datap, uintf length ); 


Copies the HTTP content - type : 

value into the buffer provided by 
actual number of bytes present. 


uintf 

evsCGIContentLength< EwsContext context ); 


Returns the value of the HTTP 
content -length: header or zero if 
not present 


uintf 

evsCGIContentEncodingC EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP contenc- encod- 
ing: value into the buffer provided 
by the application and returns the 
actual number of bytes present. 



Note that the context access functions that copy values Into application-provided 
strings return the actual number of bytes in the value. If the value is not present, then 
these functions return zero. These functions do not overwrite the application buffer 
(i.e. the length parameter shall be honored by Em Web/Server). However, the function 
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may return a number greater than the length if the application buffer was riot large 
enough to accommodate the value. In fact, the length parameter of zero may be used 
to determine the size of the buffer needed. 

4.1.6. Raw CGI 

We believe that one of the greatest features of EmWeb/Server is that the system 
Integrator can implement nearly any embedded Web-based application without using 
CGI. 

While Agranat Systems strongly discourages Its use, we recognize that some highly 
sophisticated applications may require a raw CGI interface, and so we provide one. 

A URL corresponding to the base name of a CGI script may be specified in the access 
file which is processed by the EmWeb/Compiler. The application must provide two 
functions for each CGI script with names derived from the value of the cgi- symbol 
directive in the _access file as follows: 

EwaCGIHandle ewaCGISitax t^symbcl ( EwsContext context ); 

This function is called by EmWeb/Server when a CGI script is first requested by a Web 
server. The application returns a handle that is passed back to the application in the 
second function: 

void evaCGIData_symbcJ ( EwaCGIHandle handle, EwaNetBuffei buffer ); 

This second function is called by EmWeb/Server to pass one or more buffers to the 
application containing raw CGI data (i.e. the HTTP message body) as they are 
received from the network. The application is responsible for knowing where the end 
of data is from the content - length: header (available from ewsCGicontentLeng th). 

Restriction: The application's evacGiData_symboJ function 
must not attempt to access request headefinformation from 
the request context because the network buffer(s) containing 
request headers may have been discarded. Any information 
needed by the application should be copied and saved during 

e waCGI S ta r t^symbol . 

The application may generate a standardized HTTP response header by invoking the 
following function: 

EwsStatus evsCGXSendStatus 
{ EwsContext context, const char * status, const char •string); 

This function sends an HTTP status line for the appropriate HTTP version. The status 
argument must contain a null-terminated character string containing a three-digit 
HTTP status code followed optionally by descriptive status text. If not NULL, the string 
argument contains a null-terminated character string containing additional headers, 
anchor data. This function returns ews_status_ox on success. Otherwise, an error 
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code (ews_status_bad_state or ews_status_no_resources) is returned. Note that if 
ewsccisendstatus is to be used, It must be usecTonly once per request, and must be 
used before catling ewsCGiData . 

For example, to send a simple HTML page: ■ 

ewsCGISendstatus ( context, "200 OK", 
"Content -Type: text/hunl\i\n" 
"Content-Length: 66\r\n" 
"\r\n" 

" <HEAD> <TITLE> Example < /TITLE >< /HEAD >" 
"<BODY>This is an example </BODY>" ); 

The application may send additional headers followed by a message body by invoking 
the following function: 

EwsStatus evsCGIData ( EwsContext context, EwaNetBuf f ex buffer ) ; 

This function sends the chain of buffers to the Web browser. Note that the application 
must delimit the header and body sections with a blank line sequence in accordance 
with the HTTP specification. To complete the request, the application should invoke 
this function with an ewajietjbufferjiull buffer descriptor. This causes EmWeb/ 
Server to close the connection. This function returns ews_status_ox on success. 
Otherwise, an error code (ews_status_bad_state) is returned. 

Instead of sending headers and data, the application may instruct EmWeb/Server to 
generate a redirect to a specified URL or, if local, serve a local document as a 
response. To send a redirect response to the browser (for a local or remote document) 
the application may invoke the following function: 

EwsStatus evsCGIRediiect < EwsContext context, const chai * uil ); 

To serve a local document as a response, the application may invoke the following 
function: 

EwsStatus ewsContextSendReply ( EwsContext context, char * uil ); 

Note that these functions may not be used in conjunction with ewsCGiData or 
ewsccisendstatus. The url parameter may be a relative or absolute URL 

Several CGI environment values are available from the HTTP request context as 
outlined In the Context section above. In addition, the following two functions return 
global server information for conformance with CGI/1 .0: 

const char * ewsCGIServerSof twaxe ( void ) 
Returns the server software version string, for example "Agianat-Emweb/Ri_o n . 
const char * ewsCGIGatewaylnterface ( void ) 
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Returns the gateway interface version string, for example "cgi/i . o n . 
4.1.7. Logging Hook 

The application may optionally provide the following function (or macro) for logging 
HTTP events: 

void evaLogHook(EvsContext context, EvsLogStatus status); 

This function is invoked by Em Web/Server at least once for each HTTP request, and 
possibly a second time for certain dispositions after a successful request. Possible 
status values include (from src/inciude/evs_def .h) : 

typedef enum EvsLogStatus e 
( 

h 

• 200 Request accepted 
•/ 

EWS LOG STATUS OK, 



* Request dispositions (aftei successful request) 

/ 



EWS JLOG_STATUS_NO_CONTENT . 
EWS_LOG_STATUs[_MOVED_PERMANEim.Y , 

ews_log_status~movedjtemporarily , 
ews~log_status~see_other , 
ewsJlogJstatusJnot_modified , 



' 204 no-op form ox ima 
/« 301 link •/ 
/* 302 redirect */ 
/* 303 see other •/ 
304 not modified sine 



* 4 01 Unauthorized 



ews_log_status_auth_failed , 
ews_log~status~auth_forgery , 
ews_log_status_auth_stale , 
ews^log^status^authjiequired , 
ews~log~statos~auth~digest required , 



/* authorization failed 
/• bad message checksum 
/* authorization nonce s 
/• authorization not pre 
/• message digest not pz 



* 400 Bad Request 
•/ 

EWS_LOG_STATUS_BAD_REQUEST , 
EWS_LOG_STATUS_BADJP0RM , 

ews_log_status_bad~i MAGEMAP , 



h HTTP parse error */ 
/* form data parse error 
/* imagemap query parse 



• Additional errors 

■•/ 

EWS_LOG_STATUS_KOT_FOUND, . 

Ews3 TC r CTATOs 3^^° D - NoT - ALLowED ' 

ews~log_status~length~reouired , 
ews^log^status^unaval lable , 
ews_log~status2not_implemented , 



/• 4 04 not found or hidd 

/* 405 method not allowe 

h 411 length requiied * 

/« 503 aborted Document 

/* 501 bad method for UR 
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ews_log_status_no_resources , 
ews_log2status_ioternal_error 



/• 500 insufficient reso 
/• 500 internal error •/ 



} EwsLogStatus; 

4.1.8. Local Filesystem Interfaces 

The EmWeb Server provides the ability to manage a filesystem on the serving system. 
The Server supports: 

- uploading a file from a client (browser) to the server 

- serving the contents of a file In response to a URL GET 

In both cases, the filesystem is external to the EmWeb Server. EmWeb assumes 
nothing about the implementation of this filesystem; it can exist on a local disk, non- 
volatile memory, or on an external proxy. All EmWeb requires is the ability to: 

- retrieve/set meta-information about the file (e.g., type, size, modification time, etc.). 

- open a file 

- read a number of bytes from a existing file 

- write a number of bytes to a newly created file 

* close a file. 

The API that must be supplied to EmWeb to provide these functions is defined below. 
To enable the basic file support, define the preprocessor symbol 
£W_C0NFIG_0PTI0N_FILE in ev_config.h. 

4.1.8.1. The EwsFifeParams structure 

The EwsFiieParams structure Is defined in the evs^sys .h include file. It is used by the 
EmWeb server to associate meta-information with a local file. The EwsFiieParams 
structure consists of a union of two substructures. These substructures correspond 
to the file function that EmWeb is to perform. The fiieFieid structure is used when 
the browser is uploading a file to the server via a form post (see RFC1B67). The 
f iieinfo structure is used to serve a file In response to a get for a particular URL 
The individual fields for each of these structures is described in the description 
associated file operation. 

typedef union EwsFiieParams s 

[ 

h 

* fiieFieid ■ for support of the form INPUT TYPE » FILE field. 

* The server fills out this structure, and passes it to 

* the application vhen the file is submitted 
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# ifdef EW_CONFIG_OPTION_FIELDTyPE_FILE 
struct 

{ 

const char *fileName; /* file name 01 NULL •/ 

const char *contentType; /* MIME type */ 
const char *contentEncoding; /* content encoding ox NULL •/ 
const char *contentDisposition; /* Content -disposition: •/ 
int32 contentLength; /* length ox Ews_CONTENT_LENGTH_UNKNOWN */ 

} fileField; ~ 

# endif /* EW_CONFIG_OPTION_FIELDTYPE_FILE */ 



• filelnfo • fox support fox local file operations (GET, HEAD, OPTIONS, ■ 

• PUT, DELETE). This structure is setup by the application vhen a URL 

• that corresponds to a local file is received. This structure 

• gives the server all it needs to know to handle the file operation. 
•/ 

* if defined ( EW_C0NFIG_OPTI0K_FILEJ3£T ) 
struct 
i 

EwaFileNome fileName; /• file name (opaque) */ 

const chax •contentType; h MIME type */ 

const chax *contentEncoding; /• content encoding ox NULL */ 

const char *contentLanguage; /• content language ox NULL */ 

const chai *eTag; /* HTTP/1.1 cachability tag, or NULL •/ 

const char ♦lastModif ied; /• modification time (RFC1123) ox NULL */ 

const char *lastModifiedl036; /* modification time (RFC1036) or NULL •/ 

const char *realm; /* auth realm or NULL */ 

int32 contentLength; /* length ox EWS_CONTENT_I£NGTH_UNKNOWN •/ 

EwsRequestMethod allow; /• allowed methods •/ 

/* HEAD & OPTION _alvays_ allowed by default •/ 

) filelnfo; 

chax reservedl; 

} EwsFileParams, *EwsFileParamsP; 

4.1 .8.2. File Upload 

Support for File Upload is enabled In the EmWeb server by defining the preprocessor 

Symbol EWJXNFIG_OPTION_FIEUDWP£_FILE in ew_config.h. 

To support file upload, EmWeb supports the methods described in RFC1867 (Form- 
based File Upload in HTML). At the time of this writing, only Netscape Navigator 
implements this RFC. For more Information about RFC1867 and file upload 
support, contact Agranat Systems. 

RFC1 867 describes a new form input field of type-file. This form field results in an 
input field that allows a user to enter a filename. This filename is the name of a file 
that is accessible by the browser. On submission of this form, the browser reads the 



Copyright 0 1997 Agranat Systems, inc. Page 55 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 

EmWeb™ Functional Specification 



-84- 
Confidential 



PC1YUS97/13817 
Em Web/Server 



file, and sends the file's contents to server as part of the post request. 
This file field takes the following form: 

<INPUT TYPE « FILE UAHE*name VALUE«value> 



Where name is the name of the form field and value is the default filename to display 
in the form when it is first served. When the EmWeb/Compiler encounters one of 
these form fields, the following form structure fields are generated: 

char *name; 
EwaFileHandle na/ne__handle; 

The name field Is used by the form serve function only. It allows the application to 
override the default file name jgiven when the form is first displayed (note: some 
browsers do not support a default value - call Agranat Systems for more information). 
The namejiandie field is used by tl?e form submit function only. It provides the file 
handle for the submitted file (see the discussion of ewaFiiePost below). The status 
for namejiandie is set to (ewjform_retuioied i ew_form__dynamio on successful file 
post, else ew_form_file_error. 

When EmWeb receives the submitted file, it allocates an EvsFiiePaiams structure 
and initializes the f iieFieid substructure. The fiieFieid substructure is setup using 
the optional file headers that are sent along with the file. The fiieFieid fields are: 

fileName 

Null terminated string containing the name of the file. This is usually 
supplied as the basename of the file (no path information). This field will be 
a null pointer if the browser does not supply a filename. 

contentType 

Null terminated string containing the value of the content-Type header, or 
a null pointer if the content-Type header is not present (assumed to be 
text/plain). 

contentEncoding 

Null terminated string containing the value of the content -Encoding header, 
or a null pointer If the content -Encoding header is not present. 

contentDisposition 

' Null terminated string containing the value of the content -Disposition 
header, or a null pointer if the content-Disposition header is not present. 

contentLength 

set to the number of bytes in the file to be posted. If the content -Length 
header is not supplied by the browser, then this field will be set to 
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EWS_COHTEOTJJBHGTH_UNKNOWN. 

As soon as EmWeb receives the submitted form containing an iwut type»file field 
with file content, prior to calling the applications submit function, a call will be made 
to the application interface ewaFilePost: 

EwaFileHandle ewaFilePost ( 
Ews Context context, 
const EwsFileParams *paiams ) ; 

This function is provided by the application. The application defines the appropriate 
type for EwaFileHandle, and the value for ewa_file_haotle_null i which indicates a 
null EvaFileHandle. The paiams parameter is initialized by EmWeb as described 
above, and released by EmWeb on return from evaFiiePost. 

ewaFilePost should open a file, and return a EvaFileHandle value that uniquely 
identifies that file. On error, ewaFilePost can return ewa_filej-:u7dle_null, which 
will cause EmWeb to discard the contents of the submitted file without discarding the 
other submitted form fields. The application can also call evssuspend to suspend the 
current context. In this case, ewaFilePost will be reinvoked (with 

ewsContextlsResuining (context) TRUE) Once the application calls ewsResume On 

the context. The request can be aborted and the connection closed if ewaFilePost 

invokes ewsNetHTTPAbort. 

After ewaFilePost is called, EmWeb will start calling the file write routine: 

sintf ewaFileWritef EwsContext context, 

EwaFileHandle handle, 
const uintB «datap, 
uintf length ) ; 

handle is set to the value that was returned by the ewaFilePost call, da tap is a 
pointer to the data to be written, and length is set to the number of bytes that can be 
written from da tap. ewaFiiewxite returns the number of bytes written, or < o if an 
error occurred. If < o is returned, EmWeb will discard the rest of the incoming file 
without discarding the other submitted form fields. The application can suspend the 
current context by calling ewssuspend from within ewaFiiewiite and returning the 
number of bytes written prior to suspending (can be zero). The application can then 
resume the context by calling ewsResume. This will cause evaFiiewrice to be 

reinvoked With ewsContextlsResumingt context ) «* TRUE and da tap and length 

adjusted by the number returned by the suspended call to evsFiiewzite. The 
application can also call evsNetHTTPAboit to abort the entire request, and close the 
connection. 

After the entire file has been received and written, the application's form submit 
function will be called. If the status field has been set to ew_formj>eturned, then the 
name^handie contains the file handle for the file as returned by evaFiiePost. It is the 
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responsibility of the form submit function to dose the file at this point. 

Note well that once a file handle is returned by evaFiiepost, it is the responsibility of 
the application to close that file handle during the form submit function. EmWeb/ 
Server will close the file handle if the request is aborted prior to calling the submit 

41.8.3. File Serve 

The EmWeb Server allows an application to provide a file external to an EmWeb 
archive for the response to a get request This functionality is enabled by defining 
the preprocessor symbol ew_config_optionj^ile_gct in ev_config.h. 

To serve a file, an application must •mark" a get request URL as representing a non- 
archive file. Once this is done, the EmWeb Server will •open" this file, read data from 
it and serve this data in response to the URL get. After all data is served, EmWeb 
Server will close the file. 

To "mark" a URL as a local file, the application calls the server interface 

evsContextSetFile during a URL GET: 

Ews Status evsContextSetFile ( Ev's Con text context, 

EwsFilePaxamsP paiams ); 

evsContextSetFile can be called from: 

• evaURLHook once the URL is determined to be a local file entity. 

- an application's form submit function prior to calling evscontextsendRepiy. In this 
case, the URL passed to evscontextsendRepiy represents the local file to be served. 

Note that both the evaURLHook and an application's form submit function can suspend 
the current context using evssuspend. This allows the application to do any 
asynchronous tasks needed prior to calling evscontextsetme. 

The fiiemfo substructure of the pazam parameter must be set up by the application 
prior to calling evscontextsetme. This structure gives EmWeb Server all the 
information about the file It needs In order to serve the file as response content. The 
fields are described below: 

EwaFileName fileName 

This field Is for use only by the application, EmWeb Server ignores this field. 
The type EwaFileName must be specified by the application. 

contentType 

set to a null terminated string containing the value for the content -Type 
header that is to be sent with the file. 
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contentEncoding 

set to a null terminated string containing the value for the content- 
Encoding header that is sent with the file. Jf a null pointer, no content- 
Encoding header is sent. 

contentLanguage 

set to a null terminated string containing the value for the content - 
Language header that is sent with the file. If a null pointer, no content- 
Language header is sent. 

eTag 

reserved, must be set to null. 
lastModified 

the last modification date of the file in RFC1 1 23 format as a null terminated 
string. If null, it is assumed that the file should be served each time it is 
requested. 

lastModified 1036 

the last modification date of the file in RFC1 036 format as a null terminated 
string. Some browsers cannot correctly recognize the RFC1123 format, so 
this field should be set in addition to the lastModified field. Call Agranat 
Systems for more information. 

realm 

the realm the request should be authenticated against for this file as a null 
terminated string, else null if no authorization required. Authorization is 
only checked when the file is served as a result of calling ewsContextSetRle 
from ewaURLHook - the realm used to protect the form submission is used 
implicitly when serving the file as a result of a ewsContextSendReply. 

contentLength 

Set to the number of bytes in the file, else ews_content length unknown if 
the file's length is unknown. 

allow 

reserved, mUSt be Set tO evsRequestMethodGet. 

EmWeb/Server references the paxam parameter for the duration of the file operation. 
As such, this parameter must be accessible throughout the life of the request - 
beyond the context of the evacontextsetme call. It can be safely deallocated by the 
application during the ewaNetHTTPcieanup call. 

Once the URL has been •marked" by the evscontextsetme call, EmWeb/Server 
will open the file using the evamecet interface: 
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EwaFileHandle ewaFileGet( EwsContext context, 

const chai *uil, 
const EwsFileParamsP paxams ) ; 

The uri parameter is the URL that was •marked" as a file access, params is the 
EvsFiieParams structure that was passed to ewscontextsetFiie. The application 
defines the appropriate type for EwaFileHandle, and the value for 

EWA_FI LE_HANDLE JNULL , Which indicates a NULL EwaFileHandle. 

ewaFiieGet should open the file identified by params and uxi, and return a 
EwaFileHandle that uniquely represents the file. On error, ewaFiieGet can return 
ewa_file_handle_null. This causes the connection to abort. If desired, the 
application can suspend the current context by calling ewssuspend from within 
ewaFiieGet. The context can be resumed at a later time by calling ewsResume. 

ewaFiieGet Will be reinvoked (with ewsContextlsResuming ( context ) « TRUE). 

Once the file has been opened by ewaFiieGet, Em Web/Server will read the file by 

Calling ewaFileRead: 

sintf ewaFileRead ( EwsContext context, 

EwaFileHandle handle, 
uintB * da tap, 
uintf length ) ; 



This function should copy up to length bytes into the area of memory starting at 
datap. handle is set to the file handle returned by ewaFiieGet. On return, 
ewaFileRead should return the number of bytes written into datap, which can be less 
than length. On error, < o should be returned (this causes the request to be aborted 
and the connection dose). This function can suspend by calling ewssuspend and 
returning the number of bytes written into datap (can be zero). When the file 
described by handle has been completely read, this routine must return zero. 
Returning zero indicates that End-of-File has been reached (except when 
ewssuspend has been called prior to returning). 

Once all file data has been read, EmWeb/Server will close the file by calling 
ewaFileClose: 

void ewaFileClose ( EwaFileHandle handle, EwsStatus status ); 



ewaFileClose should dose the file assodated With handle (the EwsFileParains 

structure can be safely deallocated at this point), status will be set to ews status ox 
on successful completion of the file serve, otherwise It will be set to an error code. 
EmWeb/Server will call this function to close a file handle during an aborted request 
prior to calling ewaNetHTTPEnd. Note that this function does not support suspension. 
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4.2. Application Interface Examples 

This section is intended to illustrate the use of application interface functions under 
various scenarios. 

The following tables illustrates the application interfaces used in the simplest ErnWeb/ 
Server configuration. 



App!ication->Server 
(Initialization) 


Server •> 
Application 


Description 


ewslni t 


evaAlloc 


Application initializes Ern Web/Server. 
The server may allocate run-time 
memory resources. 


evsDocumentlnstallAi * 
chive 

evsAuthRegister 


evaAlloc 


Application installs one or more docu- 
ment archives and registers zero or 
more authenticated users. The server 
allocates run-time memory resources 
for its internal databases. 



Application->Server 
(HTTP Transaction) 


Server -> 
Application 


Description 


ewsNetHTTPStait 


evaAlloc 

. • • 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


evsNetHTTPReceive 
... 


evaAlloc 

evaNetBuf feiFiee 
• • * 


Application accepts request data from 
the network and passes It to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 
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Application->Server 
(HTTP Transaction) 


Server •> 
Application 


Description 


evsRun 


<EMWEB_STRING> 

evaFormSexve_« 
evaFoxmSubmi t_* 
evaCGIStaxt_« 
evaCGIData_* 


The server invokes the application 
code attached to the requested docu- 
ment in order to construct a response 
on-the-fly. 




ewaNe tBuf f ex Al- 
loc 

ewaNe CHTTPSend 
<STATUS_OK) 


The server allocates network buffers 
as needed, fills them with HTTP 
response data, and sends them to the 
application for transmission. 




ewaFree 

ewaNe tBuf f er Fx ee 

• « ♦ 

ewaNe CHTTPEnd 


The server releases any remaining 
resources associated with the HTTP 
transaction and terminates the 
request. The application closes the 
TCP connection at this point. 


The next table illustrates a typical HTTP transaction during which the application 
Instructs the EmWeb/Server to yield control of the CPU. 


Application->Server 
(Scheduling) 


Server -> 
Application 


Description 


evsNetHTTPStaxt 


ewaAlloc 


Application accepts a new HTTP TCP 
connection request and Informs the 
EmWeb/Server. The server allocates 
memory resources for the request 


ewsNe tHTTPReceive 

• • * 


ewa Alloc 

evaNe tBuf £ ex Fx e e 

• • • 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 


evsRun 


<emweb_string> 
<ehweb~include> 
ewaFormServe_* 
ewaFoxmSubmit_* 


The server invokes the application 
code attached to the requested docu- 
ment. 
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Application->Server 
(Scheduling) 


Server •> 
Application 


Description 


ewsSuspend 




The application suspends the request. 
Processing on the request stops until 
resumed. 


evsResuuie 


<EMWEB_STRING> 
<£MWEB~INCLUDE> 
evaFormServe_* 
evaFormSubmi t_* 
• • • 


The application resumes the request. 
The server re-invokes the application 
code attached to the requested docu- 
ment in order to construct a response 
on-the-fly. 




ewaNetBuffei Al- 
loc 

evaNetHTTPSend 
( STATU S_YI ELD) 


The server allocates and sends a ' 
response buffer. The application trans- 
mits the data and requests that the 
server yield the CPU. 


evsRun 
• • « 


evaNetBuf fexAl- 
loc 

evaNetHTTPSend 
(STATUS_YIELD) 
• • • 


The application reschedules the 
server. The server sends the next 
buffer. 


evsRun 


evaNe tBu f f e z Fx ee 

evaFiee . . . 
evaNetHTTPEnd 


The application reschedules the 
server. The server releases resources 
and terminates processing of the 
request. 


The next table illustrates a typical scenario in which the application aborts processing of 
an incomplete HTTP request. 


Application->Server 
(Abort) 


Server -> 
Application 


Description 


evsNetHTTPStaxt 


evaAlloc 
• • • 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


ewsNe tHTTPRecei ve 
* * * 


evaAlloc 
• « • 

evaNetBuf f ex Free 
• • • 


Application accepts request data from 
the network and passes It to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 
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Application->Server 
(Abort) 


Server -> 
Application 


Description 


evsNetHTTPAbort 


evaFiee 

ewaNetBuf fez Free 

• it 

ewaNetHTTPEnd 


Application requests abort of HTTP 
transaction in progress. Server 
releases resources and terminates 
request 


The next table illustrates the on-demand archive loading feature of EmWeb. 


Application->Server 
(Demand Loading) 


Server -> 
Application 


Description 


evsDocumentRegi scei 


ewa Alloc ... 


Application registers a URL with 
EmWeb/Serverthat is not loaded. 


evsNetHTTPStart 


ewa Alloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request 


evsNe cHTTPRecei ve 


ewaAlloc 

ewaNetBuf fexFree 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at* 
tnis point 




evaDocumentFaulc 


The server recognizes the requested 
URL to be a registered document and 
notifies the application. 


evsDocumentlnstallAr - 
chive 




The application toads the archive con- 
taining the document. 


evsRun 


<£MWEB_STRING> 

<EMWEB~INCLUDE> 

ewaFoimSeive_* 

ewaFoxmSubmit_* 

ewaCGIStait_«" 

evaCGIData_* 


The server automatically continues 
processing the request once the docu- 
ment has been loaded. The server 
invokes the application code attached 
to the requested document in order to 
construct a response on-the-fly. 




ewaNetBuffex Al- 
loc 

... 

ewaNetHTTPSend 
(STATUS_OK) 


The server allocates network buffers 
as needed, fills them with HTTP 
response data, and sends them to the 
application for transmission. 
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App!ication->Server 
(Demand Loading) 


Server -> 
Application 


Description 




evaFxee 

evaNe tBuf f ex Fr ee 
evaNetHTTPEnd 


The server releases any remaining 
resources associated with the HTTP 
transaction and terminates the 
request. The application closes the 
TCP connection at this point. 



4.3. Porting Guidelines 

The EmWeb/Server is distributed as a directory tree of ANSI C files. In order to assure 
the best possible upgrade path and support from Agranat Systems, most of these files 
should not be modified by the system integrator. 

To port EmWeb/Server to a specific target environment foo, a target-specific conf ig . too 
configuration directory must be created, config.foo contains the target-specific 
configuration files ev_types.h ( ev_config.h, and conf ig.mak. These files can be copied 
from the examples provided in the config directory, and modified as appropriate for the 
target. 

To build the server library obj ./oo/evs.a, use the following command: 

make CONFIG«foo server 

Note: The configure script may be used on Unix systems to 
automatically generate the configuration files for the local Unix 
development environment target. Typing "make" will build the 
Em Web/Compiler, the example archives, and the reference 
Unix port. 

4.3.1. Configuration Header Files 

The src/config/ev_types.hfile contains definitions for base C types used throughout 
the EmWeb/ServerT Most of these are straightforward and generally do not require 
modification under 32-bit CPU architectures. The one definition which may require 
modification by the system Integrator is the preprocessor symbol emweb_endian which 
is defined to either emwebjsndianjbig or emweb_eotian_little, and reflects the byte- 
order of the target processor (Intel processors are generally little endian while 
Motorola processors are generally big endian). The symbol emweb_mchive_endian 
indicates the byte-order of the archive generated by the EmWeb/Compiler. Byllefautt, 
the compiler generates big-endian archives unless the --little command-line 
argument is present. Note that it is more efficient if the byte-order of the archive 
matches the byte-order of the target processor. 

The sre/conf ig/ev_config.h file definitions are expected to be modified extensively 
for porting EmWeb/Server to a particular hardware platform as follows: 
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EWJ30NFIG_KTTPJ>ROTOCOL 

Define the level of protocol conformance desired. Must be set to either 
HTTP_1J>or HTTPJIJ. 

EW_CONFIG_OPT10N_DATE 

Define to enable generation of HTTP Date; headers. This function requires 
that the application provide the evaDate function. This is required tor 
protocol conformance, but some environments may simply not be able to 
determine the time-of-day. 

EWJ50NFIG_OPTlON_EXPIRE 

Define to enable generation of HTTP Expire: headers. The symbol 
ews_config_optionj>at£ must also be defined. If a dynamic document is 
requested (Le. a document containing content defined by the application as 
it is being served), then an Expire: header is generated with the current 
time. Otherwise, no Expire; header is generated. The code size may be 
reduced by not defining this symbol. This is recommended for proper HTTP 
caching. 

EW^CONFIG.OPTION.LAST.MPDIFIED 

Define To enable generation of HTTP Last- modified; headers. The symbol 
bws_config_optxon_date must also be defined. If a static document is 
requested, Then the archive creation date is returned to the Web browser. 
Otherwise, the current time is returned to the Web browser. The code size 
may be reduced by not defining this symbol. This is recommended for 
proper HTTP caching. 

EW^CONFIG^.OPTIPN^CONDITIONAL.GET 

Define to enable parsing of received if -Modified-since: headers to 
support conditional get functionality defined in the standard. This is 
recommended for proper HTTP caching. 

EW_CONFIG_OPnONJ 3 RAGMA_NOCACHE 

DefineTo enable generation of "pragma; no -cache" HTTP/1.0 headers for 
documents containing dynamic content. 

EW_CONFIG_OPnONJ>ERSISTENT 

Define To enable persistent connections. This is recommended, especially 
with HTTP/1.1, for optimum network performance. Persistent connections 
enable the browser to pipeline multiple HTTP requests over a single TCP/ 
IP connection which was not possible in the original HTTP/1 .0 specification. 

EW_CONFIG_OPnONj:HUNKED_OUT 

HTTP/1.1 only. Define to enable the generation of chunked encoded data 
during transmission of documents containing dynamic elements. This 
makes maintaining a persistent connection- possible under certain 
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circumstances and is strongly recommended. 

EW_CONFIG_OPTION_CHUNKED JN 

HTTP/1.1 only. Required for protocol conformance. Define to enable 
parsing of chunked form data received from the browser. 

EWJ50NF!G_OPTlONJ/IETHOD_OPTIONS 
Define to enable HTTP/1.1 options method. 

EW_CONFIG_OPTION_METHOD_TRACE 

Define to enable HTTP/1.1 trace method. 

EWJJONF1G_OPTION_CACHE_CONTROL 

Define to enable generation of HTTP/1.1 Cache-Control: headers. 
Recommended for optimum cache control. 

EW_CONFIG_OPnON_STR!NG . 

Define If the application intends to use the <emweb_string> feature. 
Otherwise, code size may be reduced by not defining this symbol. 

EWj;ONFIG_OPTION_STRINGJTYPED 

Define to enable typed emweb_strings (i.e. use of emwebjitpe attribute). 

EW_CONFIG_OPTIONJNCLUDE 

Define if the application intends to use the <emweb_include> feature. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_FORM 

Define if the application intends to use the EmWeb form processing 
interfaces. Otherwise, code size may be reduced by not defining this 
symbol. 

EW_CONF!G_OPnON_IMAGEMAP 

Define if the application intends to use EmWeb imagemaps. Otherwise, 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTlONJ3Gl 

Define if the application intends to use the raw CGI application interfaces. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_LINK 

Define if the application intends to use the link attribute in ^access files. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CLON!NG 

Define if the application intends to use the evsDocumentcione application 
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interface. Otherwise, code size may be reduced by not defining this symbol. 

EWJ50NFIGJDPTIONJ3EMANDJ.OADING 

Define if the application intends to use the evsDocumentRegistex/ 
evaDocumentFauit application interface. Otherwise, code size may be 
reduced by not defining this symbol. 

EW_CONFIG_OPTION_DOCUMENT_DATA 

Define if the application intends to use the evsDocumentData application 
interface. Otherwise, code size may be reduced by not defining this symbol. 

EWj:ONFIG_OPTIONJ30CUMENT_SETJ?EALM 

Define If the application intends to use the ewsDocumencsecReaim application 
interface. Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIGJDPTION_CLEANUP 

Define if the application desires to perform a graceful shutdown of the 
EmWeb/Server by invoking ewsshucdovn. In some application 
environments, graceful shutdown may not be necessary as a system restart 
may be accomplished by a re-boot of the processor. The code size may be 
reduced by not defining this symbol 

EW_CONFIG_OPT10N_SCHED 

Define if the application intends to use Em Web's internal scheduler making 
use of the ewsRun application interface. Otherwise, the code size may be 
reduced by not defining this symbol. 

EW_CONFIGJDPHON_SCHED_SUSPJ?ES 

Define If the application intends to use the evssuspend/evsResume 
application interfaces. Otherwise, the code size may be reduced by not 
defining this symbol. 

EW_CONFIG_OPTION_SCHED_FC 

Define if the application intends to use the evsNetriovcontioi/ 
unriowcontroi application interfaces. Otherwise, the code size may be 
reduced by not defining this symbol. 

EWJ20NFIG_OPHONJJRL_HOOK 

Define if the application intends to use the URL rewriting feature by 
providing the function evaimuiook interface. Otherwise, the code size may 
be reduced by not defining this symbol. 

EW_CONFIG.OPTION.AUTH 

Define to enable support for authentication through the evsAutnsegistex 
application interface. Otherwise, the code size may be reduced by not 
defining this symbol. 
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EWJJONF1G_OPTIONJOJTH_BAS1C 

Define to enable support for the HTTP/1.0 basic cookie authentication 
method. The symbol ew_config_option_auth must also be defined The 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_AUTH_MBASlC 

Define to enable support for the "manual basic" authentication scheme. The 
code size may be reduced by not defining this symbol, 

EWJ50NFIG_OPTIONJUJTH_DiGEST 

Define to enable support for the HTTP/1.1 digest authentication method. 
The symbol ew_config_option_auth must also be defined. The code size 
may be reduced by not defining this symbol. 

Note: EmWeb's digest authentication support is derived from 
the RSA Data Security, Inc. MD5 Message-Digest Algorithm. 
The following legal notice can be found in src/lib/ew_md5c.c: 

Copyiight (C) 1991-2, RSA Data Security, Inc. Created 1991. All 
rights reserved. 

License to copy and use this software is granted provided that it 
is identified as the "RSA Data Security, Inc. KD5 Message-Digest 
Algorithm" in all material mentioning or referencing this software 
or this function. 

License is also granted to make and use derivative works provided 
that such works are identified as -derived from the RSA Data 
Security, Inc. MD5 Message-Digest Algorithm" in all material 
mentioning or referencing the derived work. 

RSA Data Security, Inc. makes no representations concerning either 
the merchantability of this software or the suitability of this 
software for any particular purpose. It is provided "as is M 
without express or implied warranty of any kind. 

These notices must be retained in any copies of any part of this 
documentation and/or software. 

EW^CONFIG^OPTION.AUTH^MDIGEST 

Define to enable support for the "manual digest" authentication scheme. 
The code size may be reduced by not defining this symbol. 

EW^CONFIG.OPTION^AUTH_DIGEST_M 

Define to enable support for the digestRequired parameter used in digest 
authentication. This protects against forged messages using proper 
authentication credentials. The symbol ew_config_option auth_digest 
must also be defined. The code size may be reduced by nofdefining this 
symbol. 
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EW_CONFIG_OPTION_AUTH_VERIFY 

Define to enable support for secondary application-defined authentication. 
The code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_RELEASE_UNUSED 

Define to include extra code that attempts to release received network 
buffers as soon as possible If they do not contain information needed for the 
duration of an HTTP request. Otherwise, if HTTP headers are typically 
received in multiple network buffers, the EmWeb/Server may hold on to 
these buffers longer than necessary. 

EW_CONFIG_OPTION..FILE 

Define to include local file system support. The code size may be reduced 
by not defining this symbol 

EW_CONFIG_OPTION.FILE._GET 

Define to include access to local filesystem for GET method requests. This 
option requires ew_config_option_file. The code size may be reduced by 
not defining this symbol. ** 

EW_CONFIG_OPTlON_COMPRESS 

Define to indude extra code required for decompression of compressed 
- archives. 

EW_CONFIG_OPTION_CONTEXT_DATE 

Define to enable the evscontextnate application interface. The code size 
may be reduced by not defining this symbol. 

EW_CONFIG_OPnON_CONTEXT_PRAGMA 

Define to enable the evscontextpiagma application interface. The code size 
may be reduced by not defining this symbol. 

EW_C0NFIG_0PT10N_C0NTEXT_FR0M 

Define to enable the ewsconcextrrom application interface. The code size 
may be reduced by not defining this symbol. 

EWJ50NFIG_OPTION_CONTEXTJFJWODIFIED_.SINCE 

Define to enable the evscontextifModifieetsince application interface. 
Furthermore, EmWeb/Server honors the HTTP if-modified-since: 
header for static documents by comparing to the archive creation date. 
(Note that dynamic documents are always served). The code size may be 
reduced by not defining this symbol. 

EW_C0NFIG_0PT10N_C0NTEXT_REFERER 

Define to enable the ewscontexcReferei application interface. Otherwise, 
the code size may be reduced by not defining this symbol. 
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EW_CONFIG_OPTION_CONTEXT_.USER_AGENT 

Define to enable the evscontextuseiAgent application interface. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10N„CONTEXT.HOST 

Define to enable the ewsContextHost application interface. Otherwise the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10N_SEND_REPLY 

Define to enable the" ewsContextSendReply application interface 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CG!_SERVER_SOFTWARE 

Define to enable the evsccisexvexsoftvaie application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_GATEWAY_INTERFACE 

Sfwl 16 - 10 .f nabl f tlle ewsCGIGa tev ay i nC ei£ a ce application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

• EW_CONFIG_OPTION.CGLSERVER_PROTOCOL 

Define to enable the evsccisexveiPiotocoi application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10N_CGI_REQUEST_METHOD 

Define to enable the evsccinequestMechod application interface Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGLPATH_INFO 

Define to enable the evscciPathmfo application interface. Otherwise the 
code size may be reduced by not defining this symbol. 

EW_CONFJG_OPT10N_CGI_SCRIPT_NAME 

Define to enable the evscciscriptName application interface. Otherwise the 
code size may be reduced by not defining this symbol. 

EW_CONFJG.OPTION_CGLQUERY_STRING 

Define to enable the evscciouerystring application interface. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGLCONTENT.TYPE 

Define to enable the evsccicontentType application interface. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFfG_OPTION_CGI_CONTENT_LENGTH 

Define to enable the evsccicontenttengch application interface. Otherwise, 
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the code size may be reduced by not defining this symbol. 

EW^CONFIG.OPTION^CGLCONTENT^ENCODING 

Define to enable the evscGicontencEncoding application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT!ON_FIELDTYPE_RADIO 

Define to enable support for EmWeb HTML form radio buttons. Otherwise, 
the code size may be reduced by not defining this symbol, 

EW_CONFIG_OPT10N_FIELDTYPE_SELECT_SINGLE 

Define to enable support for EmWeb HTML form single option selection 
boxes. Otherwise, the code size may be reduced by not defining this 
symbol, 

EW - .CONFIG^OPTION - FIELDTYPE.SELECT_MULTIPLE 

Define to enable support for EmWeb HTML form multiple option selection 
boxes. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPT!ON_FlELDTYPE_CHECKBOX 

Define to enable support for EmWeb HTML form checkbox fields. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_FlELDTYPEJTEXT 

Define to enable support lor EmWeb HTML form text fields. Otherwise, the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT!ON_FIELDTYPEJMAGE 

Define To enable support for EmWeb HTML form image inputs. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW_CONF1G_OPTION_FIELDTYPE_DECIMALJJINT 

Define To enable support for EmWeb HTML form text fields for unsigned 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFlG_OPTION_FlELDTYPE_DECIMALJNT 

Define to enable support for EmWeb HTML form text fields for signed 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPHON_FIELDTYPE_HEXJNT 

Define To enable support for EmWeb HTML form text fields tor hexadecimal 
Integers. Otherwise, the code size may be reduced by not defining this 
symbol. 
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EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING 

Define to enable support for EmWeb HTML form text fields for hexadecimal 
octet strings. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTJON_FIELDTYPE_DOTTEDIP 

Define to enable support for EmWeb HTML form text fields for dotted IP 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPT10N_FIELDTYPE_DECNETJV 

Define to enable support for EmWeb HTML form text fields for DECnet.JV 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_FIELDTYPEJEEE_MAC 

Define to enable support for EmWeb HTML form text fields for IEEE MAC 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFlG_OPTION_FIELDTYPE_FDDLMAC 

Define to enable support for EmWeb HTML form text fields for FDDI MAC 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTIONLFlELDTYPE_STD_MAC 

Define to enable support for EmWeb HTML form text fields for big or little 
endian standard MAC addresses. Otherwise, the code size may be reduced 
by not defining this symbol. 

EWJ20NFIG_OPTION_F!ELDTYPE_01D 

Define to enable support for EmWeb HTML form text fields for SNMP object 
identifiers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_FIELDTYPE_FILE 

Define to enable support for RFC 1 867 file upload from browser. This option 
requires ew_config_option_file. The code size may be reduced by not 
defining this" symbol. 

EW^CONFIG^OPTION.BROKENJMS.EXTRA.DATA 

Define to handle non-conformant browsers that place. extra data at the end 
of If-Modified-Since: headers. Otherwise, the code size may be reduced by 
not defining this symbol. 
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EW_CONFlG_OPTION_BROKEN_NEED_OPAQUE 

Define to handle non-conformant browsers that require optional opaque 
field in digest authentication headers. Otherwise, the code size may be 
reduced by not defining this symbol. 

EwaNetBuffer 

Define the C type used to represent a buffer descriptor. 

EWA_NETJ3UFFERJMULL 

Define the value of a null buffer descriptor used to terminate a chain of 
buffers or indicate no buffers available. 

EwaNetHandle 

Define the C type used for the application-defined network handle passed 
to EmWeb/Server in evsNeturrpstait and available from the request 

Context by evsContexcNetHandle. 

EwaDocumentHandle 

Define the C type used for the application-defined document handle passed 

tO EmWeb/Server in ewsDocumentClone or evsDocumentRegister and 

available from the request context by evscontextDocumentHandie. 

EWA.DOCUMENT_HANDLE.NULL 

Define the value for a null document handle stored in the context for 
documents that have not been cloned or registered. 

EwaAuthHandle 

Define the C type used for the application-defined authorization handle 
passed to EmWeb/Server in evsAuthRegistei and available from the 

request context by evsContextAuchHandle. 

EWS_AUTH_HANDLE_NULL 

Define the value for a null authorization handle stored in the context for 
requests that have not been authenticated. 

EwaAuthNonce 

Define the C structure containing parameters used in generating nonce 
. challenges. 

EwaCGlHandle 

Define the C type used for the application-defined CGI handle passed to 
EmWeb/Seiver from evaccistaxt_* and returned to the application in 

Subsequent ewaCGIData_*. 

EWA_CGLHANDLE_NULL 

Define the value for a NULL CGI handle stored in the context for CGI 
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requests. 

EWAJTASK_LOCK{) 

This application-defined macro is invoked by EmWeb/Server to enter a 
critical region. If the application is preemptive and multiple threads may 
access EmWeb application interface functions simultaneously, then this 
macro should be defined in such a way as to disable preemption. 

EWAJTASKJJNLOCKO 

This application-defined macro is invoked by EmWeb/Server to leave a 
critical region entered by ewajtask_locko . 

EMWEB_ERROR0 

This application-defined macro is invoked by EmWeb/Server to report 
serious error conditions, usually a result of improper system integration. 

EMWEB J/VARNO 

This application-defined macro is invoked by EmWeb/Server to report an 
error condition for which recovery is possible. 

EMWEBJTRACEO 

This application-defined macro is invoked by EmWeb/Server to trace 

execution for debugging. 

EWA_LOG_HOOK 

Define to enable the evaLogHooko application interface. Otherwise, the 
code size may be reduced by not defining this symbol. 

EMWEB_SAN!TY 

Define to enable extra code for checking the consistent use of the API and 
internal data structures. This is strongly recommended during initial porting 
and debug. However, the code size may be reduced by not defining this 
symbol. 

EMWEBJHAVEJWEMCPY 

Define to use application-provided run-time memcpy library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_MEMSET 

Define to use application-provided run-time memset library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_SPRINTF 

Define to use application-provided run-time spiintf library function. 
Otherwise, extra server code is included to handle conversions from 
integers to strings (%d, %x). 
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EMWEB_HAVE_STRCPY 

Define to use application-provided run-time strcpy library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_STRLEN 

Define to use application-provided run-time stiien library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_STRCMP 

Define to use application-provided run-time scxcmp library function. 
Otherwise, extra server code is included to implement this functionality. 

EwaFileHandle 

Define the C type used for the application-defined file handle used in the 
local filesystem API. 

EWA_FILE_HANDLEJSIULL 

Define the value for a null file handle as used by the local filesystem API. 

EwaFileName 

Define the C structure used to represent an application-defined filename 
parameter as used by the local filesystem API. 

The following macros may be defined to override Em Web/Server defaults as follows: 

EWS_FILE_HASH_SIZE 

Default: 256. Information about each unique URL loaded from an archive, 
registered, or cloned, is maintained in an open hash table for fast lookup. 
This macro may be defined to set the number of entries in the hash table, 
where each entry contains a pointer value. Smaller values will typically 
decrease memory usage while increasing search times. 

EWS_REALM_HASH_SIZE 

Default: 4. Information about each unique realm defined in loaded archives 
or by the evsDocumentsetReaimo function is maintained in an open hash 
table for fast lookup. This macro may be defined to set the number of entries 
in the hash table, where each entry contains a pointer value. Smaller values 
will typically decrease memory usage while increasing search times. 

EWS_NONCE_QUEUE_SlZE 

Default: 4* If digest authentication is used, outstanding nonce values are 
maintained in a circular queue. This macro may be defined to set the 
maximum number of outstanding nonce values, where each value will 
contain approximately 48 bytes of state information plus the size of the 
application-defined EvaAuthwonce structure. Larger values are 
recommended If one-time nonces are to be used and/or many simultaneous 
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authenticated requests from different clients are likely. 

EWS^HTTP^STATUS^CW.EWS^HTTP^STRING^OA 

""Default: "No Content", "\r\n n . These macros may be used to override the 
status line and message body issued for a no content HTTP response. (This 
status is generated in response to a form submission application function 
returning NULL, or to an undefined region of an imagemap if no default URL 
was specified). 

EWS_HTTP_STATUSJ304, EWS_HTTP_STRING_304 

Default: "Not Modified", "\rVV. These macros may be used to override the 
status line and message body Issued for a not modified HTTP response. 
(This status is generated in response to a conditional GET request if the 
requested document has not changed since the "If-Modified-Since:" value). 

EWS^HTTP.STATUS_400,EWS_HTTP^STR1NG.400 

Defauit: "Bad Request", "\r\n400 Bad Request\r\n". These macros may be 
used to override the status line and message body issued for a bad request 
HTTP response. (This status is generated in response to an HTTP request 
that could not be parsed). • 

EWS.H7TP_STATUS.401 , EWS_HTTP_STRING_401 

~ Default: "Unauthorized", "\r\n401 Unauthorized\r\n". These macros may be 
used to override the status line and message body issued for an 
unauthorized HTTP response. (This status is generated in response to an 
HTTP request that did not contain proper credentials to access the server). 

EWS_HTTP_STATUSJK>4, EWS_HTTP_STRlNG_404 

Default: "Not Found", "\r\n404 Not Found\r\n". These macros may be used 
to override the status line and message body issued for a not found HTTP 
response. (This status is generated in response to an HTTP requests for an 
unknown or hidden URL). 

EWSjriTP_STATUS_411, EWS_HTTP_STRING_41 1 

"Default: "Length Required", "\An411 Length Required\r\n". These macros 
may be used to override the status line and message body issued for an 
Internal error HTTP response. (This status is generated in response to an 
HTTP/1.1 request containing chunk encoded form data with 
ew_confic_option_chunked_in disabled). 

EWSJfrTP_STATUS_500 t EWS_HTTP_STR!NG_500 

""Default: "Internal Error", "V\n500 Internal Error\r\n". These macros may be 
used to override the status line and message body issued for an internal 
error HTTP response. (This status is generated in response to an HTTP 
request resulting in a detectable internal error. This should not ever occur.) 
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EWSjnTP_STATUS_501, EWS_HTTP_STRING_501 

Default: "Not Implemented", "\r\n501 Not lmplemented\r\n". These macros 
may be used to override the status line and message body issued for a not 
implemented HTTP response. (This status is generated in response to an 
HTTP request containing a method not supported by the URL). 

EWS.HTTP_STATUS.503, EWS_HTTP_STRING_503 

Default: "Service Unavailable", "\r\n503 Service Unavailabie\r\n". These 
macros may be used to override the status line and message body issued 
for a service unavailable HTTP response. (This status is generated in 
response to an HTTP request for a registered and unloaded document 
when the. application-specific ewaDocumentFauItO function aborts the 
request rather than loading the archive containing the URL), 

4.3,2. Application-Provided Functions 

The following functions must be provided by the application: 

- System functions 

. ewaAIIoc 
. ewaFree 

- Network functions 

. ewaNetBufferAlloc 
. ewaNetBufferFree 
. ewaNetBufferNextGet 
. ewaNetBufferNextSet 
. ewaNetBufferLengthGet 
. ewaNetBufferLengthSet 
. ewaNetBufferDataGet 
. ewaNetBufferDataSet 
. ewaNetHTTPSend 
. ewaNetHTTPEnd 
. ewaNetHTTPCIeanup 
. ewaNetLocalHostName 



The following functions may be provided by the application if certain optional EmWeb/ 
Server features are desired. 

- System functions 

. ewaDate 
. ewaLogHook 
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- Document functions 

. ewaDocumentFault 
. ewaURLHook 

- Authentication functions 

. ewaAuthRealmQualifier 

• Digest Authentication functions 

. ewaAuthNonceCreate 
. ewaAuthNonceCheck 

- Manual Authentication functions 

. ewaAuthCheckBasic 
. ewaAuthCheckDigest 
. ewaAuthVerifySecurity 



4.4. Memory Requirements 

The following table Illustrates the approximate incremental executable image size of the 
EmWeb/Server for various configuration options enabled compiled using GNU gcc- 
2.7.0 with -02 for the Intel 486, the Intel i960, and the Motorola MC68000 architectures. 
These values are subject to change without notice. 



incremental Option 


i486 


i960 


MC68000 


Base EmWeb/Server functionality 


7,380 


7,496 


6,238 


<EMWEB_STRING> 


180 


216 


184 


Typed <EMWEB_STRlNG>s 


464 


464 


454 


<EMWEBJNCLUDE> 
(requires some additional code 
from <EMWEB_STRING>). 


384 


400 


312 


Base EmWeb HTML form support 


3,124 


3,168 
1— 


2,548 


imagemap support 


288 


320 


272 


Base raw CGI support 


640 


656 


578 


URL Link support 


16 


32 


28 


Document cloning 


400 


.400 


314 


Document on-demand loading 


492 


520 


440 
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Incremental Option 


I486 


i960 


MC68000 


Document data, access 


64 


72 


74 


Graceful server shutdown 


272 


264 


220 


Reouesl sehedulino Meld CPLh 


656 

W w \J 


624 


AAA 


Proxy (ewsSuspend/ewsResume) 
frenuires reauest sehedulino) 


320 


296 


242 


Wptwnrk flow control 

(requires request scheduling) 


368 

WWW 






URL rewriting (ewaURLHook) 


304 


208 


164 


Base filesystem support 


176 


224 


170 


GET/HEAD from local filesystem 
(Requires base filesystem sup.) 


1,876 


1,480 


1,326 


Base authentication support 


1,168 


1,032 


934 


Basic authentication 


952 


1,056 


824 


Digest authentication 


5,547 


6,732 


5,366 


Client message digest verification 
(requires digest authentication) 


1,335 


1,016 


742 


Manual basic authentication 
(requires basic authentication) 


608 


472 


482 


Manual basic decode 
(requires manual basic) 


336 


352 


198 


Manual digest authentication 
(requires digest authentication) 


384 


368 


366 


Manual authentication verification 


144 


144 


128 


Run-time document realm override 


0 


0 


0 


Base HTTP/1.1 support 


1,284 


1,160 


972 


Persistent connections 


8B3 


616 


614 


Generate chunked encoding 
(requires HTTP/1.1) 


828 


7B4 


632 


Parse chunked encoding 
(requires HTTP/1. 1) 


855 


552 


468 


OPTIONS method 


250 


240 


192 
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Incremental Option 


i486 


I960 


MC68000 


TRACE method 


268 


288 


204 


Generate Cache-Control headers 


122 


128 


96 


Generate Date headers (ewaDate) 


41 


64 


32 


Generate Expire headers 
(ewaDate) 


76 


176 


60 


Generate Last-Modified headers 


82 


112 


76 


Conditional get support 


239 


280 


248 


Generate Pragma headers 


35 


48 


34 


Early release of network buffers 


224 


240 


208 


Compression 


525 


584 


462 


Parse Date headers 


64 


56 


72 


Parse Pragma headers 


75 


64 


82 


Parse From headers 


73 


72 


82 


Parse If-Modified-Since headers 


64 


64 


72 


Parse Referer headers 


76 


64 


86 


Parse User-Agent headers 


79 


104 


90 


Parse Host headers 


169 


128 


.124 


ewsContextSendReply 


626 


632 


494 


ewsCGIServerSoftware 


31 


40 


30 


ewsCGIGatewaylnterface 


24 


32 


22 


ewsCGIServerProtocol 


64 


56 


68 


ewsCGIRequestMethod 


64 


64 


68 


ewsCGIPathlnfo 


16 


16 


16 


ewsCGIScriptName 


16 


16 


16 


ewsCGIQueryString 


64 


64 


68 


ewsCGIContenfiype 


80 


64 


72 


ewsCGIContentLength 


16 


16 


16 


ewsCGIContentEncoding 


64 


64 


72 
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Incremental Option 






MC68000 


Form radio buttons 


328 


304 




Form single option select boxes 


57 


64 


62 


Form multiple option select boxes 


128 


144 


124 


Form checkboxes 


OR 


QC 


92 


Form text fields 


307 


352 


256 


Form image input fields 


93 


104 


86 


Form text fields - unsigned integer 


0 


0 


0 


Form text fields - signed integer 
(requires some code from 
unsigned integer) 


98 


128 


90 


Form text fields - hexadecimal int . 
(requires some code from 
unsigned integer) 


164 


184 


166 


Form text fields - hex string 
(requires some code from 
unsigned integer) 


706 


704 


550 


Form text fields -dotted IP 
(requires some code from 
unsigned integer) 


354 


416 


310 


Form text fields - DECNet IV 
(requires some code from 
unsioned integer) 


272 


352 


280 


Form text fields - IEEE MAC 


144 


160 


136 


Form text fields - FDDI MAC 
(requires some code from IEEE 
MAC) 


48 


48 


44 


Form text fields • Standard MAC 
(requires some code from IEEE 
MAC) 


1 fin 


192 


168 


Form text fields - SNMP Object ID 


400 


400 


340 


Form file fileds - file upload 
(requires base filesystem support) 


4,372 


4,232 


3,394 


Broken If-Modified-Since Extra 


84 


128 1 124 
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Incremental Ootion 


i486 


i960 






I D 


10 


16 


Internal cnrintf Hhrarv 
iiUeiiicti opium iiuicuy 


ODD 


nop 


coo 

582 


Internal ctrnnw 1 1 K ro r\/ 

internal sir cpy uorary 




336 


46 


tntfimol P^r/*fwn IfKrorv/ 

iniernai sircmp iiDrary 


128 


184 


52 


Internal ctrien lihrarv 
•I Medial dujcii uuiQiy 


i Rn 


384 


162 


Internal mpmrnv lihrarv 


l OU 


OU 


•8 


Internal memset library 


16 


16 


n 


Extra sanity checking code 


1,248 


1,080 


1,008 


Error reporting 


2,498 


2,984 


2,358 


Warning reporting 


2,527 


2,888 


2,350 


Debug tracing 


1,686 


2,392 


1,764 


Logging hook 


704 


1,056 


778 


FULL CONFIGURATION 


52,677 


55,348 


44,740 



Note that some of the configurable options listed in the table above depend on pieces 
of code included from previous options as indicated. The table shov/s the incremental 
requirements as each option Is added from top to bottom. Therefore, the executable 
image size for an arbitrary set of options may be different than the sum of the values 
shown above. 

Additional archive memory requirements include 

- Compressed file contents and embedded application object code (controlled by 
application) 

• 120 bytes per archive 

- 36 bytes per document in archive (plus null-terminated URL string) 

- 12 bytes per <£mweb_strihg> , <emweb_include>, CGI script, or form field 

• null terminated strings for authorization realms, mime types, creation date, etc. 

- compression dictionary (if compression used). 
Additional run-time memory requirements include: 
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- Network buffers (controlled by application). EmWeb/Server typically holds on to 
received buffers containing HTTP headers of interest for the duration of a request 
and typically allocates only one or two buffers before sending them to the application 
for transmission. 

- 1,028 - 1,096 bytes total global EmWeb state (using defaults for hash table sizes 
which may be overridden by application) 

- 176 - 636 bytes per HTTP request (plus 48-52 bytes for first served document, plus 
48 bytes for decompression context if compressed) 

- 48-52 bytes per nested <emweb_ino.ude> document (plus 48 bytes for de- 
compression context if compressed) 

- 40-64 bytes per URL in archive (including clones and registered documents) 

- 20-44 bytes per authorization realm plus null-terminated realm name string 

- 20-28 bytes per authorization entry plus Base64 or MD5 encoding of user/password 
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5. Conformance 

The EmWeb/Server implements the HTTP/1.1 and HTTP/1.0 protocols, and MD5 Digest 
Authentication. 

The EmWeb/Server raw CGI capabilities support the functionality of CGI/1.1, but the 
interfaces are non-standard as they are optimized for the EmWeb/Server environment. In 
addition, some CGI/1.1 interfaces depend upon the specific integration of EmWeb/Server 
into the application environment. 

The Em Web/Compiler supports HTML/2.0 Forms with RFC 1867 file upload extensions. 
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6. Release History 



Release 1.0 (12/23/96) 


General Availability 


Release 1.1 (02/16/97) 


Added network flow-control interfaces 




Porto H tn \/vWnrVc 

roneo 10 vxvYunsS 


Release 1.3 (03/07/97) 


Ported to pSOS 


Release 2.0 (04/14/97) 


Added HTTP/1.1 support 
Added support for typed EMWEB_STRlNGs 
Added EMWEB_STATIC cache-control override 
Added support for remote authentication databases' 


Release Z1 (06/20/97) 


Added native filesystem support 
Added RFC 1867 (file upload from browser) support 
Added support for EMWEBJYPE-OBJECTJD 
Added support for SNMP Research <mibobj> tags 
Added ewaNetHTTPCIeanupQ interfaces 
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A. EmWeb Application Interface Header Files 

This appendix is intended for reference only and is not part of this specification. The C 
header files listed here are part of the standard EmWeb source distribution and may be 
updated from time to time. 



A-1. Configuration 

These sample configuration header files are provided in the EmWeb source distribution. It 
is expected that these files will be modified by the system integrator in order to port the 
EmWeb/Server to the target environment No other files in the EmWeb distribution should 
be modified In any way. 

A-1.1. src/config/ew_types.h 

This files contains definitions for base C types used throughout the EmWeb product. In 
most environments, this file will not need to be modified except possibly for the definition 
of ekwsbjsndian and emweb_archivejsndian. However, for some compilers, it may be 
necessary for the system integrator to modify additional definitions here. 

ew_types.h,v 1.20 1997/03/31 19:14:25 lawience Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
WalCham, MA 02154 

(617) 893-7868 

salesOagranat.com, supportGagranat.com 
http : //www . agranat . com/ 
EmWeb common types 

>/ 

#ifndef J2WJTYPES_H 
ttdefine EW~TYPES_H 
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src/confi9/ew_types. h 



* C-TYPES 

* The following basic C- types are defined (see ev config.h) 
•/ 

ftifndef INT8 

ft define INT8 signed char 
ftendif 

#ifndef UINT8 

ft define UINT8 unsigned chai 
ftendif 

ftifndef INT16 

ft define INT16 shore int 
ftendif 



ftifndef XNT32 

ft define INT32 long int 

ftendif 

ftifndef P_INT 

ft define P_INT int 

ftendif 



/• an integer the same si2e as a pointer */ 



typedef INT8 intB; 

typedef INT16 intl6; 

typedef INT32 int32; 

typedef UINT8 uint8; 

typedef unsigned INT16 uintl6; 

typedef unsigned IHT32 uint32; 



/* signed eight bit integer */ 

/■ signed sixteen bit integer •/ 

/* signed thirty* tvo bit integer •/ 

/* unsigned eight hit integer */ 

/* unsigned sixteen bit integer */ 

/• unsigned thirty -tvo bit integer */ 



* Vola tiles for memory shared with devices 



typedef volatile int8 vint8; 

typedef volatile intl6 vintl6; 

typedef volatile int32 vint32; 

typedef volatile uint8 vuint8; 

typedef volatile uintie vuintl6; 

typedef volatile uint32 vuint32; 



/• volatile signed eight bits •/ 

/• volatile signed sixteen bits */ 

/• volatile signed thirty -two bits •/ 

/• volatile signed eight bits •/ 

/* volatile unsigned sixteen bits »/ 

/* volatile unsigned thirty -two bits 



* FAST TYPES 

* The following types offer the most efficient compilation for optimized speed 

* These are never assumed to be more than 16 bits. 
•/ 

typedef int / sintf; /• signed integer •/ 

typedef unsigned uintf; /* unsigned integer •/ 



* BOOLEAN 

* The boolean type is used primarily as a function return type. Note that 

* a default representation of TRUE and FALSE are defined. However, care 

* should.be taken to ovoid comparing against these values. For most compilers, 

* TRUE can be any non-zero integer while FALSE is defined as zero. 
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(o »• 0) 

( ! TRUE) 

typedef uintf boolean; /* true or false (non-zero or zero) •/ 

/* 

* POINTER INTEGER 

* The pointer integer is an unsigned integer large enough to accommodate a 

* machine pointer. This is used primarily for generic pointer arithmetic, 
V 

typedef P_INT pint; /* unsigned integer for pointer •/ 

/• 

* NULL POINTER 
#ifndef NULL 

#define NULL (0) 
ftendif /• NULL */ 



ftdefine TRUE 
#define FALSE 



1234 
4321 

typedef enum Endian_e 
{ 

evBigEndian « EHWEB_ENDIANJBIG , 
evLittleEndian - EMWEB^ENDIAN^LITTLE 
} Endian; 

ftif 0 
/* 

* EMWEB ENDIAN • Define as endian -ness of target architecture 
•/ 

#ifndef EMWEB_ENDIAN 
# ifdef HAVE_CONFIG_H 
ft include N config.h M 
ft ifdef WORDS_BIGENDIAN 

ft define EMWEB_ENDIAN EMWEB_ENDIAN_BIG 

ft else 

ft define EMWEB ENDIAN EKWEB_ENDIAN_LITTLE 

ft endif 
ft else 

ft pragma error "Define EMWEB_ENDIAN for target" 

ft endif 

ftelse 

ft pragma error "Define EMWEB_ENDIAN for target" 
ft endif /• HAVE_CONFIG_H */ 
ftendif /• !TBD! */ 



/* 

* ENDIAN (don't change these) 
*/ 

ftdefine EMWEB_ENDIAN_BIG 
ftdef ine EMWEB ENDIAN~LITTLE 



* EMWEB ARCHIVE ENDIAN 
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* Define endian fox target archive as generated by EmWeb/Compiler 
•/ 

^define emweb_archive_endian £MWEB_ENDIANJBIG 
h 

* COMPILER COMPATIBILITY 

* BEGIN_DECLS precedes external definitions, END DECLS follovs external 

* definitions. These could be defined as 'extern "C" {' and ' )• respectively 
s * for GNU C++ compilers, for example. 

•/ 

flifdef cplusplus 

^define - _BEGINJDECI.S extern { 

#def ine END_DECLS } 

tfelse /•■ cplusplus •/ 

fldefine BEGIN_DECLS 

^define END_DECLS 

#endif /• cplusplus •/ 

/* 

* PROTOTYPES 
•/ 

BEGIN_D£CLS 

END DECLS 



tfendif /• EWJTYPES_H */ 



A-1.2. src/config/ew_config.h 

This file must be modified by the system integrator to taylor EmWeb/Server to the target 
environment 



ev_config.h,v 1.77.2.3 1997/06/15 19:22:31 ian Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

Copyright <C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

sales®agr ana t . com , suppor t©agr ana t . com 
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* http://www.agi anat.com/ 

* Emweb common configuration 

#ifndef _EW_CONFIG_H 
#def ine _EW_CONFIG_H 

/* 

* Types fox sized integers: INT8 INT16 INT32 P_INT 



* These are guesses as to the correct types to produce the 

* required sizes for your system. 

* The configure script will attempt to set these correctly 

* for the compiler platform; you should sec when you copy this 

* file for each target. 



flifndef INT8 

# define INT8 signed char 
#endif 

#ifndef INT16 

# define INT16 short int 
tfendif 

#ifndef INT32 

# define INT32 int 
#endif 

#ifndef P_INT /* an integer the same size as a pointer •/ 

# define P_INT int 
#endif 

#include M ew_types .h tt 
/• 

* INCLUDES 

* Any system includes needed by application environment go here 
*/ 

extern void application_tick 0 ; 
^include <stdio.h> 
tinclude <stdlib.h> 
#include <sys/types.h> 
#include <netinet/in.h> 
^include <signal.h> 

/• 

* HTTP PROTOCOL VERSION 
•/ 

# define HTTP_1 0 1000 /* DO NOT MODIFY •/ 
ft define HTTP l"l 1001 /• DO NOT MODIFY •/ 
/• 

* Select desired conformance level 
•/ 
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•define EW_CX)NFIG_HTTP_PROTOCOL HTTP_1_1 

* PROTOCOL OPTIONS (>« HTTP/1.0) 

* (K) Required, but some embedded systems don't have time-of-day 

* (O) Optional, but strongly recommended 

•define EWJ3>NFIG_OPTIONJ>AT£ /• (R) Generate Date: */ 

•define £W_CONFIG_OPTION_£XPIRE /* (O) Generate Expire: */ 

•define EW_CONFIG_OPTION_IAST_MODIFIED /* (O) Generate Last -modified! */ 

•define EvTcONFIG^OPTION^CONDITIONAL^GET/* (O) Parse If -Modified -Since: */ 

•define EW_CONFIG_OFTION_PRAGMA_NOCACHE /* (o) Generate Pragma i no- cache •/ 

/* 

* PROTOCOL OPTIONS (>- HTTP/1.1) 

* (0) Optional, but strongly recommended 

* (*) May be used vith HTTP/l.O 
•/ 

•define EW_CONFIG_OPTION_P£RSI STENT /* (o* ) persistent connections ♦/ 
•define EW_CONFIG_OPTION_CHUNKED_OUT- /• (O) respond with chunked encoding */ 
•define EW_CONFIG_OPTION_CHUNX£I>_IN /• (O) parse chunked encoding •/ 
•define EW_CONFIG_OPHON_METHOD_OPTIONS /* (0«) support OPTIONS method */ 
•define EW~CONFI G~OPTI ON~METHOD~TRACE /* (O*) support TRACE method •/ 

•undef EW_C0NFIG_OPTI0N_METH0D_PDT /• (•) support PUT operations •/ 

•undef EW^CONFIG^OPTION^METHOD^DELETE /* (•) support DELETE operations */ 
•define EW_C0NFIG_OPTI0N_CACHE_CONTR0L /• (0*) Generate Cache • Control : */ 

/• 

* CONFIGURATION OPTIONS 
* 

* The EmWeb/Server may be customized by the application developer to balance 

* between functionality v.s. memory and CPU requirements. Each of the options 

* below may be selected (ftdefine) or unselected Uundef ) . 
•/ 

•define EW_CONFIG_OPTI0N_STRING /* emweb_string support •/ 

#define EW^CONFIG"oPTION"sTRING_TyPED /* typed~emweb string support */ 

•define EW~O)NFIG~0PTI0N_INCLuT>E /« emweb_include support */ 

•define EW~roNFIG~OPTION~FORM /* form support •/ 

•define ew~C0NFIG~0PTI0N_imagemap /« support fox imagemaps */ 

•define EW^CONFIG^OPTION^CGI /* raw CGI support «/ 

•define EvTcONFIG_OPTI0N_LINK /* link node support */ 

•define EW~C0NFIG_OPTI0N_CL0NING /• URL cloning support •/ 

•define EW_C0NFIG_OPTI0N_DEMAND_LOADING /* demand document loading support */ 

•define Ew"cONFIc"omONJ30CUMENT_DATA /* direct archive data access support */ 

•define E W~C0NFI g2oPTI 0N~D0 CUMENT_S ET_REALM /* run -time realm assignment sup. •/ 

•define EvfcONFIG^OPTION^CLEANUP /• graceful cleanup support */ 

•define EvTcONFIG_OPTION_SCHED /* request scheduling support •/ 

•define EvTcoNFI G~OPTI 0N_S CHED_SUS P_RES /* suspend/resume request support •/ 

•define E5Tc0NFIG~OPTI0N_SCHED_FC /* flow control support */ 

•define EW^CONFIG^OPTIONJJRL^HOOK /• request URL rewriting hook •/ 

•define EW~CONFIG~OFTIONJVUTH /• authorization support •/ 

•define EW~CONFIG~omON~AUTH_BASIC /• basic authorization support •/ 

•define EW~O)NFIGJDPn0N_AUTH_DIGEST /• digest authorization support •/ 

•define EW^CONFIG^OPTIONJWTHJttGESTJ* h «. verify client message digest •/ 
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#define EW_C0NFIG_OPTIONAUTH_MBASIC /* -manual" basic au then ci cation */ 
fldefine EW_CONFIG_OPTIONAUTH_MBASIC_DECODE /* do base64 decode fox MBASIC */ 
#define EWj:0NFIGj5PTIONJOTH_MDIGEST /* "manual" digest authentication «/ 
#define EW^CONFIG^OPTIONJVUTH^VERIFy /• manual verification of client •/ 
#define EW_C0NFIG_0PTI0N_C0MPRESS /* archive decompression support •/ 

#define EW_CONFIG_OPTION RELEAS E_UNUSED /* Early release of unused buffers */ 
#define EWj:ONFIG_OPTION_FILE /• local filesystem support */ 

ttdefine EW_C0NFIG_OPTI0N_FILE_GET /* local filesystem GET method •/ 

#define EW_C0NFIG_OPTION_FII^_I>ELETE /* local filesystem DELETE method •/ 
#define EW_CONFIGJ3PTION_FILE_PUT /* local filesystem PUT method •/ 

/* 

* Options to include support for retrieving HTTP request headers 
♦/ 

#define EW_CONFIG_OPTXON_C»NT£XT_DATE 

#define EW~CONFIG_OPTION~CONT£XT_PRAGMA 

#def ine EWJTONFI G~OPTI ON~CONTEXT~FROM 

#define EW_C0NFIG_0PTION~C0NTEXt2xF_MODIFIED_SINCE 

#define E>TcONFIG~OPTI ON^CONTEXt'rEFERER 

#def ine EW_CONFIG~OPTION_CONTEXT~USER . AGENT 

^define ew~config_option2context_host~ 

/• 

* Option for serving document to browser in response to form or CGI 
•/ 

#define EW_CONFIG_OPTION_CONTEXT_SEND_REPLY 
/* 

* Options to include support for CGI access functions 
•/ 

#define EW_CONFIGJDPTION_CGI_SERVER_SOFTWARE 
*def ine £W~CONFI G~0 PTI ON_CGI~G ATEWAY_INTER FACE 
#define EWj:ONFIG~0PTION~CGI~SERVER_PR0T0C0L 
#define EW^CONFIG^OPTION^CGI^REOUEST^METHOD 
#define EWj:0NFIGJ)PTI0N~CGI~PATH_INF0 
#define ew^config_option"cgi"script_name 

#define EW~CONFIGJ)PTIONJ:GI_QUERyJFtRIKG 

#define ew_config^option"cgi"contentjtype 

#define EW^CONFIG^OPTION^CGI^CONTENT^LENGTH 
ftdefine EW^CONFIG^OPTION^CGI^CONTEOT^ENCODING 

/* 

* Options to handle certain form field types (EW_C0NFIG_0PTI0N_F0RM must be 

* defined for these to take effect) . " "~ 
•/ 

ttdefine EW_CONFIG_OPTION_FIELDTYPE_RADIO 
^define EW^CONFIG3oPTION"FIEUnYPE_SElXCT_SINGLE 
#define EW^CONFIG^OPTION^FIEUJTVPE^SEl^CT^MULTIPLE 
. #def ine EW^CONFIG^OmON^FIELDTYPE^CKECXBOX 
#def ine EW^CONFIG^OPTION^FIELDTYPE^TEXT 
#define EW^CONFIG^OPTION^FIELDTYPE^IMAGE 

ttdefine ew"confic""option"fieldtype"decimal_uint 

#define EW^CONFIG^OmON^FIELDTYPE^DECIMAL^INT 

#define evTconfig_optionIfieldtype"hex_int 
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#define EW_CONFI G_OPTION_FIELDTYPE_HEX_STRING 
#define EW~C0NFIg3>PTI0N~FIEU)TYPE_D0TTEDIP 
#define EW~C0NFIG~0PTI0N~FIEU)7YPEJ}ECNET_IV 
#define EW~CONFIG~OPTION~FIElI)TYPE_IEEEJ4AC 
fldefine EW~CONFIG~OPTI ON_FIEII)TYPE~FDDI_MAC 
fldefine EW_CONFI G~OFTI ON~FIEU)TYPE~STD_MAC 
#define Ew"cONFIg2oPTION~FIELDTYPE~OID 
ftdefine EW_CONFIG_OPTION__FIELDTVPe"fILE 

/• 

* Foxce use of the buffer early release option if support for 

* file input field • needed so ve don't buffer the entire 

* incoming file. 
•/ 

flifdef EW_CONFIGJ>PTION_FIEU)TYPE_FILE 
tfifndef EW~CONFIG~OPTION~RELEASE_UNUS£D 
tfdefine EvTcONFIG^OPTION^RELEASE^UNUSED 
#endif /• EW_CONFIG_OPTIONJlELEAl£JJNUSED */ 
flendif /* EW~CONFIG~OPTION~FIELDTYP£_FILE •/ 

/• 

* Options to handle non- conformant browsers 
• 

* BROKEN_IMS_EXTRA_DATA • Several recent versions of Netscape incorrectly 

* add extra information at the end of an If -Modif ied-Since: header in the 

* form <si2e • n) tt . This is in violation of the HTTP specification and 

* causes EmWeb/Server to effectively ignore the header. Since so many 

* browsers exhibit this behaviour, this vork-around is provided to ignore 

* extra characters after the date string. 
•/ 

# def ine EWJTONFI G_OPTI ON_BROKEN_IMS_EXTRA_DATA 

/* 
* 

* B*OKEN_N££D_OPAQUE - NCSA_Mosaic/2 .7b5 and Spyglass_Mosaic/2 . 11 

* incorrectly require the servez to generate an opaque parameter 

* in www- Authenticate: headers using Digest authentication. 
*/ 

#define EW_CONFI GJDPTI ON_BROKEN_NEED_OPADUE 
/• 

* SANITY CHECKING 

* Define EMWEB^SANITY to include extra sanity checking code during initial 

* integration fend debugging. Code sire may be reduced by not defining this. 
•/ 

#def ine EMWEB_SANITY 

* PORT -SPECIFIC DEFINITIONS 
•/ 

#define ewaAlloc malloc 
#define ewaFree free 
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* TRACING AND LOGGING 
« 

* The following macros provide tracing and logging facilities using ANSI 

* printf 0 style arguments. 



#define EMWEB_ERROR (x) 
#define emweb_warn<x) 
#define EMWEBJTRACE (x) 
#define EWA_LOG_HOOK 



printf x 
printf x 
/•printf x*/ 

/* define to include ewaLogHookO interface */ 



NETWORX BUFFERS 

The network buffer structure is defined by the application and used 
by the EmWeb /Server . A network buffer could be an index into an array, 
a pointer to a buffer descriptor t etc. EmWeb/Server imposes only the 
following requirements on the application's buffer implementation: 

o Given a buffer, a pointer to the start of data may be determined, 
o Given a buffer, the number of byces of data may be determined or 

specified. The EmWeb/Server will never attempt to increase the 

size of a buffer, 
o Given a buffer, the next buffer on a singly linked list may be 

determined or specified. 

The EwaNetBuffer structure is used by EmWeb/Server to represents a buffer 
descriptor. The value EWA_NET_BUFFER_NULL indicates a NULL buffer used to 
terminate a buffer chain or as a return value from EwaNetBuffer Alloc 0 
indicating no buffers available. 



typedef struct EwaNetBuf fer_s 



{ 



struct EwaNetBuffer_s 

uint8 

uint8 

uintf 



• next; 

• realdata; 

• data; 
length; 



} EwaNetBuf fer_t, * EwaNetBuffer; 
ttdefine EWA_NET_BUFFER_NULL {(EwaNetBuffer) NULL) 
/* Buffer primitives • these may be macros or subroutines */ 



#define ewaNetBuf ferLengthGet (buffer) 
#define ewaNetBuf ferLengthSet (buffer , len) 
^define ewaNetBuf ferDataGet (buffer) 
#define ewaNetBuf ferDataSet (buffer . da tap) 
#def ine ewaNetBuf ferNextGet (buffer ) 
^define ewaNetBuf ferNextSet (buffer , nxt) 



(buffer) •> length 
(buffer) •> length - len 
(buffer) • >data 
(buffer) *>data « datap 
(buffer) ->next 
(buf fer) • >nexc * nxt 



• Application -specific Network handle 



typedef struct EwaNetHandle_s EwaNetHandle_t, * EwaNetHandle; 
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^define EWA_NET_HANDLE_NULL ( (EwaNetHandle) NULL) 

h 

* Application* specific netvozk handle cleanup function (oz macro) 

* Invoked by EmWeb/Servez after each processing each HTTP request 

* before invoking ewaNetHTTPEndO • 
*/ 

*ifndef EW_CONFIG_OPTION_FILE_GET 

^define ewaNetHTTPCleanup( handle ) /* no cleanup necessary */ 
*endif 

h 

* Application- specific Document handle 
•/ 

typedef void * EwaDocumentHandle ; 

#def ine EWA_DO CUMENT_HANDLE_NULL ( (EvaDocumentHandle) NULL) 

ftifdef EWJTONFIG OPTION AUTH 

* AUTHORIZATION 

* The application may attach an application-specific handle to an entry 

* in the authentication database. .The C-type for this handle is defined 

* by the application below. 
•/" 

typedef void * EwaAuthHandle; /* user handle to ID entry •/ 

^define EWA_AUTH_HANDLE_NULL {(EwaAuthHandle) NULL) 

#ifdef EW CONFIG_OPTION_AUTH_DIG£ST 
/• 

* Application* specific nonce parameters • these are used for Digest 

* authentication to generate one-time challenges. Recommended values 

* include the client's IP address (derived from the network handle) , 

* a time -stamp, a server -side secret value, and other random bits and 

* pieces. The EmWeb/Server generates an MD5 hash on these values (hiding 

* their semantics) to create the nonce value sent as challenges. 
•/ 

typedef struct EwaAuthNonce s 
{ 

uint32 client_ip; 
uint32 timestamp; 
uint32 up_counter; 
* define EWA_AUTH_SE CR£T_S I ZE 8 

char secret [£WAJVUTH~SECRET_SIZ£] ; 

) EwaAuthNonce; 

#endif /* EW_CONFIG_OPTION_AUTH_DIGEST •/ 

#endif /• £K_CONFIG_OPTION_AUTH */ 

/* 

* RAW CGI INTERFACE 

* The application may attach an application- specific handle to a raw CGI 
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* request. The C-type for this handle is defined by the application below. 
•/ 

typedef void * EvaCGZHandle; 

#define EWA_CGIJiANDLE_NULL ( (EwaCGIHandle) NULL) 

/• 

* LOCKING 
* 

* The following macros must be defined to disable and enable .task preemption 

* to protect critical regions if more than one pre-emptive task may access 

* EmWeb/Server API functions at the same time. 
•/ 

#define EWA_TASK_L0OC() 
#define EWA~TASK~UNLOCK ( ) 

GLOBAL STATE 

'/ 

typedef struct EwsState_s *EwsStateP; 

The ews_state is a pointer to global state information used internally 
by EmWeb/Server . In some environments, it may be desirable to maintain 
multiple threads of EmWeb/Server within a single memory. To support this 
functionality, ews_state may be overridden by a macro that expands at 
run- time to different values. The only requirement is that the macro 
returns type (EwsStateP) , and that the address of the pointer (&ews_state) 
can be determined. For example: 

#define ews state (* ( (EwsStateP*) someFunction(someArgument) ) ) 

/ 



LIBRARIES 

The EmWeb/Server implementation uses the following standard c library 
functions: 

sprintf - for converting decimal integers to strings, needed to 
generate Content -Length: HTTP headers. 

strcpy - for copying null- terminated strings between the application 
and the EmWeb/Server (usually URL names) . 

strcmp - for comparing null- terminated strings (comparing URL names). 

strlen - get size of string 

Most embedded environments have these functions available in libraries. 
However, EmWeb/Server can be configured to provide its own internal 
implementations for this purpose. (Note that a general sprintf 
implementation is not provided. Instead, only a conversion routine from 
long integers to strings is needed. 

The following macros should be defined (#define) if the corresponding 
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* function is provided by the application environment. 
•V 

#undef EMWEB_HAVE_S PRINTF 
#undef EMWEB JiAVEJSTRCPY 
flundef EMWEB~HAVE_STRCMP 
flundef EMWEB JiAVE_STRLEN 
#undef EMWEB^HAVE^MEMCPY 
tfundef EMWEB_HAVE_MEMSET 
flundef EMWEB_HAVE~STRCHR 

/* If you have 'index 1 but not 1 strchx', define EKWEB_HAVE_STRCHR and 

* #de£ine EMWEB_STRCHR ( s , c ) index(s,c) 
*/ 

Ififdef EW CONFIG_OPTION_FILE 

* SERVER FILE SUPPORT 

* ■ 

* For support of a server side file system. 
•/ 

typedef struct EvaFileHandle_s *EvaFileHandle; 
ttdefine EWA_FILE_HANDLE_NULL~{ (EwaFileHandle) NULL) 

#if defined ( EW__CONFIG_OPTION_FILE_GET ) \ 

H defined ( EW_CONFIG_OPTION_FILE_PUT ) \ 

|| defined { EW_CONFIG~0PTION_FILE_DELETE ) 
typedef void •EvaFileName; /* unused for now */ 

#endif /* EW_CONFIG_OPTIOH_FILE_xxx •/ 
#endif /* EW^CONFIG^OPTIONJTLE •/ 

#endif /• _EW_CONFIG_H •/ 



A-2. Common Header Files 

The header files provided here may be included by application software and define the 
application interfaces to the EmWeb/Server. 

A-2.1. src/include/ews_api.h 

This is a master include file for EmWeb/Server which, in turn, includes all other 
application interface header files. We recommend that applications include this file for 
ease of integration with future releases. 

/• 

* evs_api.h,v 1.12 1997/05/21 21:55:43 lan Exp 
• 

* Product: EmWeb 

* Release: R2_l 
* 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
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THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agianat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

salesOagraziat.com, supporteagranat.com 
http://www.agranat.com/ 
EmWeb/Server Application Interface 

/ 



aifndef m 


_EWS_API_H 






tidet ine _ 


jews_api_h 






U include 


*ew_types .h" 


/* 


application-defined generic types 


#include 


"ew_conf ig.h" 


h 


application -defined configuration 


^include 


"ews_def .h M 


/• 


general interface definitions */ 


^include 


• , ews_sys.h" 


/• 


system interfaces */ 


^include 


u ews_net .h" 


/• 


network interfaces •/ 


# include 


"ews^doc.h" 


/* 


document interfaces */ 


# include 


"ews^auth.h" 


/• 


authentication interfaces */ 


^include 


"ews_cgi .h" 


/• 


CGI interfaces */ 


^include 


•ews^txt.h" 


/* 


context access interfaces •/ 



#endif /* EWS API H •/ 



A-2.2. src/include/ews_def.h 

This file contains general definitions used throughout the EmWeb/Server application 
interface. 

/• 

* ews_def.h,V 1.26 1997/05/25 23:30:32 giusti Exp 
• 

* Product: EmWeb 

* Release: R2_l 
* 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 

* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 
+ 

* Copyright (C) 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 
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* 1345 Main Street 
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* 

* (617) 893-7868 
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* 

* http://wwv.agxanat.com/ 

* EmWeb/Server public definitions 

#ifndef _£WS_DEF_H 
#def ine _EWS_DEF_H 

typedef const char •EwsConstChaxP; 
/• 

* Status codes returned to the application by EmWeb/Server 
•/ 

typedef enum EvsStatus e 
< 

EWS_STATUS_OK, 
EWS~STATUS~BAD_MAGI C , 
' EWS_STATOS_BAD_VERSION, 
EWS_STATUS~ALREADY_EXISTS , 

ews_status_noj*es0urces , 
ews^status^in^use , 
ews~status~not_registered , 
ews_status~not~cloned . 
ews^status^not^found , 
ews~status~auth_failed, 

EWS_STATUS_BAD_ItATE , 

ews~status~bad_realm , 
ews_status_fatal_error , 
ews^status^aborted 

J EvsStatus; 

/• 

* Status codes returned to EmWeb/Server by the application 
•/ 

typedef enum EvaStatus_e 
{ 

EWA_STATUS_OK, 

# ifdef EW_CONFiG_OPTI0N_SCHED 
EWA_STATUS J)K Jf IELD , 

* endif 

EWA_STATUS_ERROR 
} EvaStatus; 

/• 
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* EmWeb/Servex request context handle 
V 

typedef struct EvsContext_s * Ewscontext; 

#def ine ews_context_null ~ ( (Ewscontext) NULL) 

flifdef EWA_LOG_HOOK 

h 

* Status codes used fox logging requests 
*/ 

typedef enum EvsLogStatus e 
f 

/* 

* 200 Request accepted 
•/ 

EWS LOG STATUS OK, 



* Request dispositions (after successful request) 
•/ 



EWS JLOG_STATUS_NO_CONTENT , 

EWSJLOC_STATUS~MO^D_PERMANENTLY, 

EWS~LOG_STATUS_MOVED~TEMPORARILY, 

ews3log~status_see_other , 
ews log status not modified, 



/* 204 no-op form or imagemap */ 
/♦ 301 link */ 
/* 302 redirect •/ 
/• 303 see other */ 
/• 304 not modified since */ 



* 401 Unauthorized 



ews_log_status_auth_failed , 
ews_log_status_auth_forgery , 
ews~log_status~auth_stale , 
ews~log~status~autitrequired , 

EWS~LOG~STATUS~AUTh"dIGEST REQUIRED, 



/* authorization failed •/ 
/• bad message checksum */ 
h authorization nonce stale */ 
/* authorization not present •/ 
/• message digest not present */ 



• 400 Bad Request 
*/ 

ews_log_status_bad_request , 
ews_log_status_bad~form , 
ews ""log status ~bad"imagemap , 



/• HTTP parse error */ 
/* form data parse error */ 
/* imagemap query parse error •/ 



* Additional errors 
•/ 

ews_log_status_not_found , 

EWS~LOG_STATUs3ffiTHOD_NOT_ALLOWED , 

ews~log~statusjlength_required , 
ews~log~status~unavail&ble , 
ews_log_status_not_implemented , 
ews_log~status_no_resources # 
ews~log~status_ioternaljerror 



h 404 not found or hidden */ 
/* 4 05 method not allowed •/ 
/* 411 length required */ 

/* 503 aborted Document Fault 1 
/* 501 bad method for URL •/ 

/* 500 insufficient resources 1 
/* 500 internal error */ 



} EvsLogStatus; 
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/• 

* evaLogHook 

* Applicacion logging hook 
* 

* context • context of request being logged 

* status • logging status 
•/ 

flifndef evaLogHook 

extern void evaLogHook (EwsContext context, EvsLogStatus status); 
#endif /« evaLogHook */ 

#else /* EWA_LOG_HOOK V 

#de£ine evaLogHook (context, status) 

#endif /• EWA_LOG_HOOK */ 

/• 

* EmWeb/Servex archive descriptor* 
typedef struct EvsArchive^s * Evs Archive ; 
/• 

* EmWeb/server document handle 
•/ 

typedef struct EwsDocument_s * EvsDocument; 

#def ine EWSJ30CUMENTJJULL ( (EvsDocument) KULL) 

/* 

* EmWeb/Servei opaque read-only data handle 
•/ 

typedef const uint8 EvsAxchiveData [] ; 
/• 

* EmWeb/Servex authorization handle 
•/ 

typedef struct EvsAuthHandle_s • EvsAuthHandle; 
#define EWS_AUTH_HANDLEJJULL~ ((EvsAuthHandle) NULL) 

flifdef EW CONFIG OPTION_F0RM 

* Application form interface constants for status byte 
•/ 

^define EW_FORM_INITIALIZED 0x01 
^define EvTfORMJDYNAMIC 0x02 
Udefine evTformjieturned oxio 
^define EW^FOJW^PARSE^ERROR 0x20 

ttdefine EW~FORM~FILE_ERROR 0x20 /* equivalent to parse error •/ 

/* 

* EmWeb/Server form element types 
•/ 

#i f def £W_CONFIG_OPTION_FIELDTYPE JIEX_STRXNG 
typedef struct EvsFormFieldHexString_s 
{ 

uint32 length; 
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uint8 »datap; 
} EvsFormFieldHexString, *EvsFormFieldHexStringP; 
#endif /* EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING */ 

#if (defined (EW_CONFIG_OPTION_FIELDTVPE_IEEE_MAC) \ 
|| defined (EW_CONFIG_OPTION_FIELDT?PE_FDDI_MAC) \ 

II defined (ew_config_option_fieldtype"std_mao \ 
) 

cypedef uint8 EvsFormFieldMAC|6] ; 
ttendif /* MAC •/ 

tfifdef EW_CONFIG_OPTION_FIELDTYPE_OID 
cypedef struct EvsFormFieldObjectID_s 
{ 

uint32 length; /* number of uint32's in da tap •/ 

uint32 *datap; /* array of uint32's representing OID */ 

} EvsFormFieldObjectID, *EvsFormFieldObjectIDP; 
#endif /• EW_CONFIG_0PTION_FIEU>TYPE_OID */ 

#if defined (EW_CONFIGJDPTIONJ^IELDTYPEJ*ADIO) I I \ 
defined <EW CONFIG~OPTION~FIELDTYPE_SELECT_SINGLE) 

/. 

* ewsFormEnumToString 

* Lookup string corresponding to enum from context 
* 

* context - context of request 

* enum • value of enumerator 
* 

* Returns string from corresponding HTML VALUE* field, or NULL if out of 

* bounds. 
*/ 

extern const char * ewsFormEnumToString ( EwsContext context, int value ); 
#endif /* EW_CONFIG__OPTION_FIELDTYPE_RADIO I SELECT_SINGLE •/ 

#endif /• EW_CONFIG_OPTION_FORM •/ 
/* 

* EwsRequestMethod 
# 

* This is an enum for supported request methods. Bit values are used so 

* groups of valid request methods can be grouped into a single field 
•/ 

typedef enum EvsRequestMethod_e 
{ 

ewsRequestMethodUnknown ■ 0x0000 /• all others */ 
,evsRequestMethodGet ■ 0x0001 /* GET */ 
,evsRequestMethodPost • 0x0002 /• POST •/ 
,evsRequestMethodHead - 0x0004 /* HEAD */ 

tt ifdef EW_CONFIG_OmON_METHOD_OPTIONS 

#eW sRequestMethodOptions - 0x0008 /* OPTIONS */ 

# endif 

# ifdef EW CONFIG OmON_METHOD_TRACE 
,evsRequestMethodTrace ■ 0x0010 /* TRACE •/ 
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tf endif 

# ifdef EW_CONFIG_OPTION_METHOD_PUT 
,ewsReguestMethodPut - 0x0020 /* PUT •/ 

# endif 

# ifdef EW_CONFIG_OPTION_METHODJDELETE 
,ewsReguestMethodDelete • 0x0040 /* DELETE •/ 

# endif 

} EwsRequestMethod; 



#endif /* _EWS_DEF_H */ 



A-2.3. src/include/ews_sys.h 

This file contains definitions and prototypes of the system functions of the application 
interface, 

/• 

• ews_sys.h,V 1. 17. 2. 3 1997/06/02 23:46:39 giusti Exp 

• Product: EmWeb 

• Release: R2_l 

• CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS. INC 

• THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

• EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

• Copyright (C) 1996, 1997 Agranat Systems, Inc. 

• All Rights Reserved 

• Agranat Systems, Inc. 

• 1345 Main Street 

• Waltham, MA 02154 

• (617) B93-786B 

• sales9agranat.com, supportdagranat.com 

• http://www.agranat.com/ 

• EmWeb/Server system interfaces 
•/ 

tfifndef _EWS_SYS_H 
Udef ine _EWS_SYS_H 

ff include "ew_types.h M 
^include "ev_conf ig.h" 
include "ewajdef .h w 
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/ * • 

* INITIALIZATION AND SHUTDOWN 
* 

* The EmWeb/Server must be initialized at start-up before accepting requests, 

* installing document archives, or registering authentication information. 
* 

• * — **/ 

/* 

* ewslnit 

* Initialize EmWeb/Server 
* 

* Returns EWS STATUS OK on success, else failure code (TBD) . 
•/ 

extern EvsStatus ewslnit ( void ) ; 

tfifdef EW_CONFIG_OPTION_CLEANUP 
/* 

* evs Shutdown 

* Graceful shutdown of EmWeb/Server terminating all requests in progress 

* and releasing all memory and buffers. 
* 

* Returns £WS_STATUS_OK on success, else failure code (TBD) . 
*/ 

extern EvsStatus ewsShutdown ( void ); 
#endif /• EW_CONFIG_OPTION_CLEANUP •/ 

#ifdef EW_CONFIG OPTION_SCHED 

» .... 

* SCHEDULING 
* 

* The EmWeb/Server is capable of both multi- threading HTTP requests and 

* yielding execution control to the CPU. The following functions are provided 

* to give the application control over how EmWeb/Server schedules pending 

* requests. 

•••••• **** * / 

/• 

* ewsRun 

* Reschedule request processing after control returned to application as a 

* result of returning EWA_STATUS_OX_YIELD from evaNetHTTPSendO , 

* ewaNetHTTPEndO , or ewaDocumentFault 0 , or as the value to the status 

* parameter in ewsResumeO . 
• 

* Returns EWS STATUS OK on success, else failure code (TBD). 

•/ \ 

extern EvsStatus ewsRun ( void ) ; 
#ifdef EW_CONFIG_0PTION SCHED SUSP RES 
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* evsSuspend 

* Suspend processing of the cuxzent request during an EmWeb callout function 

* (e.g. EmWebString, EmWebFoxmSexve, or EmWebFormSubmit) .. This function is 

* used in the implementation of proxies. 
* 

* Note that this does jnot_ cause the server to stop processing requests; in 

* fact, it forces a flush of any partially filled buffer for the current 

* request and may process other pending requests. This just causes the 

* cuxzent callout to be marked as 'suspended 1 . When the current callout 

* returns, the result will be ignored - after ewsResume (below) is called 

* for this same context, the callout will be repeated. 
« 

* context - context of request to be suspended 
* 

* Returns £WS_STATUS_OK on success, else failure code (TBD) . 
*/ 

extern EwsStacus ewsSuspend ( EwsContext context ); 
/* 

* ewsResume 

* Resume processing of a request previously suspended by ewsSuspendO . This 
« causes the request to be rescheduled, and the callout from which ewsSuspend 

* had been called will be xeinvoked. 
* 

* context • Context of suspended request to be resumed 

* status - EWA_STATUS_OK or EWA_STATUS_OK_YIELD . 
* 

* Returns EWS_STATUS_OK on success, else failure code (TBD) . 

EwsStatus ewsResume ( EwsContext context, EwaStatus status ); 
#endif /* EW_CONFIG_OPTlONjSCH£D_SUSP_RES */ 

flendif /• EW_CONFIG_OPTION_SCHED «/ 



* MEMORY MANAGEMENT 
* 

* The EmWeb/Server presumes that the target O/S has a dynamic memory 

* management capability roughly equivalent to the POSIX mallocO and freeO 

* functions. 
* 

* Alternatively, the application could create a static linked-list of memory 

* blocks of different sizes. Refer to the product documentation for 

* information about run -time memory requirements. 
* 

* The application is responsible for providing the following memory management 

* functions to the EmWeb/Server . 
• 

• * / 

ftifndef evaAlloc 
/• 

* evaAlloc 
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* Allocate a block of memory of at least the requested number of bytes. 

* bytes • requested size of the memory block in bytes 
* 

* Returns a pointer to the first byte of memory, or NULL if no memory of the 

* requested size is available. 

extern void * evaAlloc { uintf bytes ) ; 
#endif 

#ifndef ewaFree 
/• 

* ewaFree 

* Free a block of memory previously allocated by evaAlloc 0 

* pointer - pointer to beginning of memory block (from evaAlloc {)) 
* 

* Ho return value 
•/ 

extern void evaFree ( void * pointer ) ; 
flendif 

#ifdef EWJT0NFIG_OPTI0N_DATE 

* TIME -OF* DAY MANAGEMENT 

* If DATE support is enabled, the EmWeb/Server invokes the following 

* application* provided function to retrieve the current date for use in 

* Date: HTTP headers. Furthermore, the current date is also used in 

* Expire: and Last -modified: headers of dynamically generated documents 

* (i.e. HTML documents containing EMWEB extensions), if configured. 

* Note that the Last-modif ied: header of static documents use the archive 

* creation date stored in the archive by the EmWeb /compiler . 



flifndef ewaDate 
ewaDate 

Return a string containing the current time-of -day in one of the HTTP 
standard representations as follows: 

RFC1123: ,(Pz*f erred standard) 
Fri, 28 Jun 1996 15:57:28 GMT 

RFC850: (Used, but not preferred) 
Friday, 28 -Jun-96 15:57:28 GMT 

asctime: (Allowed, but discouraged) 
Jun 6 15:57:28 1996 

/ 
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extern const chai * evaDate ( void ) ; 
flendif 



flendif /• EW_CON FI G_OPTI ON_DATE */ 



tfifdef EW CONFIG OPTION URL HOOK 



/ 



* URL REWRITING 



* 



* If URL rewriting support is enabled, the EmWeb/Server will invoke the 

* following function when each request has been successfully parsed, but 

* before the URL is looked up in the f ilesystem. The application can then ' 

* return a new (or the same) URL to actually serve. 



* Returns new URL, or NULL to cause abort. (For no-op, simply return url) . 
* 

* Note: the application MUST NOT invoke ewsNetHTTPAbor t from here! Return 

* a NULL pointer instead! 
• 

* The URL may be rewritten in place if the length is not increased; 

* if the returned pointer is not within the uil parameter, the value is 

* copied by the server . 
•/ 

extern char * ewaURLHook ( EwsContext context, chai *url ) ; 
*endif 

Hendif /« EW_CONFIG_OPTION_LOG_HOOK */ 
/* 

* Since content length of 2ero is valid, we cannot use zero to 

* indicate when the content length is unknown (eg. dynamic data). 

* Assuming nobody will ever try to send/receive a 4gig document is 

* probably safe for now... 
•/ 

#define EWS_CONTENT_LENGTH_UNXNOWN ( <int32) -1) 
#ifdef EW CONFIG OPTION FILE 

/..♦♦♦«™.*™ 7... ♦ * 

* LOCAL FILE SYSTEM SUPPORT 
* 

* The following routines must be supplied to support the server's 

* local file system. 



/ 



tfifndef ewaURLHook 
/• 

* ewaURLHook 



* context 

* uil 



• context of request 

• requested URL 
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typedef union EwsFileParams_s 
{ 

/* 

* fileField - foi support of the form IKPUT TYPE-FILE field. 

* The server fills out this structure, and passes it to 

* the application when the file is submitted 
•/ 

# ifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 
struct 

{ 

const char *fileName; /* file name 01 NULL •/ 

const char *contentType; /* MIME type •/ 
const char *contentEncoding; /* content encoding or NULL */ 
const char *contentDisposi tion; /* Content -disposition : */ 
int32 contentLength; /* length or EWS_CONTENT_LENGTH_UNKNOWN */ 

] fileField; 

# endif /• EW_CONFIG_OPTION_FIELDTYP£_FILE •/ 



/* 

* filelnfo - for support for local file operations (GET, HEAD, OPTIONS, 

* PUT, DELETE) . This structure is secup by the application when a URL 
■ • that corresponds to a local file is received. This structure 

* gives the server all it needs to know to handle the file operation. 
•/ 

« if defined ( EW_CONFIG_OPTION_FILE_GET ) \ 
|| defined ( EvTcONFI G_OPTI ON_FI LE^PUT ) \ 
|| defined ( EWj:ONFIG_0?TION~FILE~DELET£ ) 
struct 

{ 

EvaFileName fileName; /* file name (opaque) */ 

const char «contentType; /* MIME type •/ 

const char *contentEncoding; /* content encoding or NULL */ 

const char *contentLanguage; /* content language or NULL */ 

const char «eTag; /* reserved, MUST BE NULL */ 

const char •lastModif ied; /* modification time (RFC1123) or NULL */ 

const char * lastModif iedl036; /• modification time (RFC1036) or NULL */ 

const char *realm; /* auth realm or NULL •/ 

int32 contentLength; /* . length or ews_content_LENGTH_UNKNOWN */ 

EwsRequestMethod allow; /• reserved, MUST BE ewsRequestMethodGet */ 

/* HEAD & OPTION _alvays_ allowed by default •/ 

} filelnfo; 

# endif /* local file system GET /PUT/DELETE */ 

char reservedl; /• prevenc NULL union •/ 

) EvsFileParams, *EvsFileParamsP; 



/• 

* evaFileClose 
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* Closes the file and indicates success or failure 
•/ 

extern void 

ewaFileClose (EwaFileHandle handle, EwsStatus status ); 



/* 

* evaFileWrite 

* Write data to a file 
•/ 

extern sintf 

ewaFileWrite ( EvsContext context 

, EwaFileHandle handle 
, const uint8 *datap 
, uintf length 

); 

/• returns bytes written, <0 on error •/ 
/• 

* ewaFileRead 

* Read data from a file 
•/ 

extern sintf 

ewaFileRead ( EvsContext context 

, EwaFileHandle handle /■ handle from ewaFileOpen •/ 
, uinte -datap /« pointei to data buffer •/ 

, uintf length /« length of buffer •/ 

); 

/* returns bytes read, 0 on EOF, <o on error */ 

#ifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 
/• 

* ewaFilePost 

* For multipart/form-data file submissions. Before the application's 

* submit function is called, the server may invoke this function for 

* each received file as part of a <INPUT TYPE*FILE> element in the 

* form. If successful, the file handle will be passed to the 

* application's submit function at which point it is the application's 

* responsibility to close the file. 
V 

extern EwaFileHandle 
ewaFilePost ( EwsContext context 

, const EwsFileParams *params 

); 

/* returns EWA_FILE_HANDLE_NULL on error •/ 
ftendif /* EW_CONFI G~OPTI ON~FXELDTYPE_FILE */ 

ITifdef EW CONFIG OPTION FILE GET 

h 

* ewaFileGet 

* When the server determines that the file set by ewscontextSetFile 

* should be served to the browser, this function is invoked to open 

* the file for reading. 
• 

* To support Conditional GET. the request message may include 



/• handle from ewaFileOpen •/ 
/* pointer to data */ 
/* length of data */ 
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* If -Modified -Since, If -Unmodified- Since, If-Match, 

* if -None -Match, or If -Range headers. In this case, the 

* server will use the information given in the returned 

* params block to determine if the file should be retrieved. 
*/ 

extern EwaFileHandle 
evaFileGet ( EwsContext context 
, const char *url 

, const EwsFileParams *params /• from ewsContextSetFile () */ 

>; 

/* returns EWA_FI LE_HANDLE_NU LL on error */ 
#endif /* EWj:ONFIGJ>PTION~FILE_GET */ 

tfendif /* EW_CONFIG_OPTION_FILE */ 

#endif /• _EWS_SYS_H V 



A-2A src/include/ews_net.h 

This file contains the definitions and prototypes used by the networking functions of the 
application Interface. 

ews_net.h,v 1.20.2.1 1997/06/15 03:03:18 giusti Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

copyright (C) 1996, 1997 Agranat systems, inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street . 
Waltham, MA 02154 

(617) 693-7868 

salesfcagranat.com, suppoxtfcagranat.com 
http : //www . agranat . com/ 

EmWeb/Server application interface to network transport layer 

ttifndef _EWS_NETJi 
*def ine _EWS_NET_H 

^include M ew_types.h H 
^include M ew_conf ig.h" 
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^include "ews def.h" 



In a typical TCP/IP implementation, the application is responsible fox 
listening to the HTTP TCP port (80) for connection requests. When a 
connection request is received, the application accepts the connection 
on behalf of EmWeb/Server and invoke evsKetHTTPStart 0 to inform the 
EmWeb/Server of the new request. 

EmWeb/Server assumes that the application maintains data buffers for 
the reception and transmission of TCP data. The only requirements that 
EmWeb/Server imposes on the buffer implementation is as follows: 

1. Buffers can be uniquely identified by a buffer descriptor. No 
assumptions are made about the actual structure of the buffer 
descriptors or their relationship to data. For example, a buffer 
descriptor could be an index into a table, a pointer to a 
structure (either contiguous or seperate from the data represented) 
etc. The application is responsible for defining the appropriate ' 
type for EwaNetBuffer and value fox EWA_NETJ3UFFER NULL. 

2. Buffers can be chained together. Given a buffer descriptor 
EmWeb/Server must be able to get or set the -next buffer in' the chain- 
field. This is done by ewaNetBuf f erNextset ( ) and 

ewaNetBuf ferNextGetO. Note that the buffer chain is terminated when 
the next buffer value is EWA_NET_BUFFER_NULL . 

3. Given a buffer descriptor, EmWeb/Server can determine the start of 
data in the buffer. Additionally, Emweb/Server may change the start 
of data in the buffer (EmWeb/Server only changes the start of data in 
the buffer upward). This is done by ewaNetBuf ferDataGetO and 
ewaNetBuf ferDataSetO . 

4. Given a buffer descriptor, EmWeb/Server can determine the size of 
contiguous data in the buffer. Additionally, Emweb/Server may 
change the size of the buffer (EmWeb/Server only changes the 

size of the buffer downward). This is done by ewaNetBuf ferLengthGet () 
and ewaNetBuf ferLengthSetO . W 

5. Emweb/Server may allocate a buffer by invoking ewaNetBuf ferAllocO 

If no buffers are available, this function returns ewa NET BUFFER NULL. 
Additionally, EmWeb/Server may release a buffer by invokinq 
ewaNetBuf ferFreeO . 

As the application receives TCP data on an HTTP connection, it passes 
this data to the EmWeb/Server by invoking ewsNetHTTPReceiveO . 

The EmWeb/Server transmits TCP data on an HTTP connection by invoking 
evaNetHTTPSendO . The application- may throttle EmWeb/Server by 
returning m_STATOS_OK_YIELD. This causes the EmWeb/Server to 
save state and return control to the application. The application must 
invoke evsRunO to give the EmWeb/Server an opportunity to continue 
processing the request. 
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* When the EmWeb/Server completes a request, it invokes ewaNetHTTPEndO . 
* 

* The application may abort a request at any time by invoking 

* ewsNetHTTPAbort () . % 
* 

* ™.™ / 

/• 

* ewsNetHTTPStart 

* Start a new HTTP request 
* 

* net_handle - application- specif ic handle representing request 

* • 

* Returns context for the request, or EWS CONT£XT_NULL on failure. 
*/ 

extern EwsContext ewsNetHTTPStart ( EwaNetHandle net_handle ); 
/• 

* ewsNetHTTPAbort 

* Abort a previously started HTTP request. 

* context • context of request to be aborted 

* Returns EWS_STATUS OK on success, else error code (TBD) 
extern EwsStatus ewsNetHTTPAbort ( EwsContext context ); 
h 

* ewsNetHTTPReceive 

* Receive request data from the network. 
• 

* context * context of request to which received data applies 

* buffer • buffer containing received data 

* Returns EWS STATUS_OK on success, else error code (TBD) 

extern EwsStatus ewsNetHTTPReceive ( EwsContext context, EwaNetBuffer buffer ); 

#ifdef EW_CONFIG_OPTI0N_SCHED_FC 

/• 

* ewsNetFlowControl 

* Mark context for flow control to avoid predicted congestion. ewsRunO will 

* place the context on the suspended list at the next opportunity and 

* continue by processing additional requests. 

* context - context of request to be flow controlled 
* 

* Recums EWS STATUS OK. 

EwsStatus ewsNetFlowControl ( EwsContext context ) ; 
/• 
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* ewsNetUnFlowControl 

* Resume previously flow controlled context 
• 

* context • context of request to be flow controlled 

* Returns EWS_STATUS OK. 

EwsStatus ewsNetUnFlowControl ( EwsContext context ); 

#endif /* EW_CONFIG__OPTION_SCHED_FC */ 

tfifndef ewaNetHTTPSend 
/• 

* ewaNetHTTPSend (Application) 

* This function must be provided by the application to accept data from 

* EmWeb/Server for transmission to a browser in response to a request. 
« 

* net_handle - application -specific request handle from ewsNetHTTPStart () 

* buffer • buffer containing data to be transmitted 

* Returns EWA_STATUS_OK on success, 'EWA_STATUS_OX_YIELD 0 n success and 

* request EmWeb/Server to yield CPU to application, or EWA_STATUS_ERROR on 

* failure. 

extern EwaStatus ewaNetHTTPSend 

( EwaNetHandle net_handle, EwaNetBuffer buffer ); 
#endif 

#ifndef ewaNetHTTPEnd 

h 

* ewaNetHTTPEnd (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to indicate the completion, of a request after all response 

* data has been sent. 
* 

* netjiandle • application- specific request handle from ewsNetHTTPStart {) 
• 

* Returns EWA_STATUS_OK on success, EWA_STATOS_OX_YiEU) on success and request 

* EmWeb/Server to yield CPU to application, or~EWA_STATUS ERROR on failure. 
•/ 

extern EwaStatus ewaNetHTTPEnd ( EwaNetHandle net handle ) ; 
#endif 

#ifndef ewaNetBuff erAlloc 
/• 

* ewaNetBufferAlloc (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to request a network buffer to be used for sending data. 

* Returns a buffer, or EWA_NET_BUFFERJNULL on failure. The length of the 

* buffer must be initialized to the number of bytes available for use 

* by EmWeb/Server. 
•/ 

extern EwaNetBuffer ewaNetBufferAlloc ( void ) ; 
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tfendif 

tfifndef ewaNetBuf fer Free 
/• 

* ewaNetBuf fer Fx ee (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to release one or a chain of network buffers (either from 
« ewsNetHTTPReceiveO or ewaNetBuf fer Alloc ()) . 

« 

* buffer - buffer (s) to be released 
« 

* No return value 
•/ 

extern void ewaNetBuff erPree ( EwaNetBuf fer buffer ) ; 
#endif 

#ifndef ewaNetBuf fer LengchGet 
/• 

* ewaNetBuff ezLengthGet (Application) 

* This function must be provided by. the application. It is invoked by 

* EmWeb/Server to get the length of the data portion of this buffer fragment. 
* 

* buffer - buffer descriptor 
• 

* Returns length of buffer 
*/ 

uintf ewaNetBuf fezLengthGet ( EwaNetBuf fez buffer ) ; 
#endif 

#ifndef ewaNetBuf fez LengthSet 
/• 

* ewaNetBuf ferLengthSet (Application). 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the length of the data portion of this buffer fragment. 

* This function is only used to decrease the original length of a 

* buffer. EmWeb/Server never increases the length of a buffer. 
« 

* buffer - buffer descriptor 

* length - new length value 
• 

* No return value 
•/ 

void ewaNetBuf ferLengthSet ( EwaNetBuf fer buffer, uintf length ); 
#endif 

ftifndef ewaNetBuf ferDataGet 
/• 

* ewaNetBuf ferDataGet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to get the pointer to the data contained in the buffer. 

* buffer - buffer descriptor 

* Returns pointer to data in buffer 
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uintB * ewaNetBuf feiDacaGet { EwaNetBuffer buffer ) ; 
flendif 

tfifndef ewaNetBuf ferDataSet 

* ewaNetBuf ferDataSet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the pointer to the data contained in the buffer. 

* This function is only used to advance the start of data forward. 

* EmWeb/Server never moves this pointer backward. 
• 

* buffer - buffer descriptor 

* datap * new start of data value 
* 

* Ko return value 
•/ 

void ewaNetBuf fexDataSet (. EwaNetBuf fer buffer, uint8 -datap ); 
#endif 

flifndef ewaNetBuf fer NextGet 
/• 

* ewaNetBufferNextGet (Application! 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to get the next buffer descriptor in the buffer chain. 
• 

* buffer - buffer descriptor 
* 

* Returns next buffer descriptor, or EWA_NET_BUFFER_NULL if end of chain. 
•/ 

EwaNetBuf fer ewaNetBufferNextGet ( EwaNetBuf fer buffer ) ; 
flendif 

tfifndef ewaNetBuf ferNextSet 
/• 

* ewaNetBufferNextSet (Application) 

* This function must be provided by the application. . It is invoked by 

* EmWeb/Server to set the next buffer descriptor in the buffer chain. 
* 

* buffer - buffer descriptor 

* next - next buffer descriptor to be attached to buffer 
* 

* No return value 
V 

void ewaNetBufferNextSet ( EwaNetBuffer buffer, EwaNetBuffer next ); 
ftendif 

flifndef ewaNetLocalHostNatne 
/• 

* evaNetLocalHostName (Application) 

* This function must be provided by the application. It is invoked by the 

* EmWeb/Server to build proper redirection (Location:) headers. This can 

* be either a dotted IP address or a fully qualified hostname. 
V 



Copyright ®1 997 Agranat Systems, inc. Page 117 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 



PCT/US97/13817 



EmWeb™ Functional Specification 



-146- 



src/indude/ew$_doc.h 



const char • ewaNetLocalHostName ( EwsContext context ); 
« end if 

fcifndef ewaNetHTTPCleanup 
/* 

* ewaNetHTTPCleanup 

* This function must be provided by the application ox defined as a 

* empty macro. It is invoked by EmWeb/Server when a request completes, 

* allowing the application to reset any processing state stored in the 

* network handle. Note that for HTTP 1.1 persistent connections, this 

* routine may be called several times for the same connection, as one 

* connection can be used for multiple requests. For the last request 

* on a connection, this routine will be called before ewaNetHTTPEnd is 

* invoked. 



* Returns void. Note that the request context is undefined during 

* this call and cannot be accessed. 
*/ 

void ewaNetHTTPCleanup ( EwaNetHandle handle ); 
#endif 

#endif /* _EWS_N£T_H */ 

A-2.5. src/include/ews_doc.h 

This file contains the definitions and prototypes for the archive and document 
management functions of the application interface. 



ews_doc.h,v 1.20 1997/05/21 21:55:44 ian Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

salesfcagr ana t . com , suppor toagrana t . com 
http ; //www . agr ana t . com/ 

EmWeb/Server application interface to document archives 



/ 
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#ifndef _EWS_DOC_H 
#def ine _EWS_DOC_H 

^include M ew_types .h" 
flinclude M ew_conf ig.h M 
^include >, ews_def .h" 



/ * 

* ARCHIVE MAINTENANCE 

* The EmWeb/Compiler generates an archive of one oi more documents. Documents 

* can be HTML files, JAVA programs, graphical images, or any other information 

* resource addressable by a URL. Archives may be independently loaded or 

* unloaded into the EmWeb/Server . 
* 

* In most applications, the entire set of available documents would be 

* compiled into a single archive and loaded at boot time. However, some 

* applications may desire to dynamically load archives at run- time as needed 

* in order to reduce memory requirements. In fact, some applications may 

* vant to implement a scheme similar to page swapping under some operating 

* systems to cache an active set of documents in memory while storing other 

* documents in a secondary storage aiea. Such a secondary storage area 

* could be in FLASH memory, or on a remote server using TFTP or other 

* protocols to load documents at run -time. 

* An EmWeb archive consists of two components. First, there is the archive 

* data component containing the database of compressed documents, information 

* about how to construct dynamic documents at run -time, access controls, 

* etc. Second, there is the archive object component containing the run- time 

* object code used, for the construction of dynamic documents, etc. 
* 

* Operating systems supporting the run -time loading and linking of object 

* code may offload both the data and object archive components to a secondary 

* storage area. Otherwise, only the data components would be offloaded 

* while the object components would be statically linked into the run- time 

* executable image. 

* Each archive contains an archive descriptor in the object component. The 

* archive descriptor is referenced by a public symbol generated by the 

* EmWeb/Compiler . In order to activate an archive at run- time, the 

* application must invoke ewsDocumentlnstallAr chive () with parameters 

* indicating the address of the data component and the archive descriptor of 

* the object component. The archive may be deactivated by invoking 

* ewsDocumentRemoveAr chive 0 . 
* 

* •••••• • ./ 

/* 

* ewsDocumen tins tallAr chive 
# 

* Install a document archive generated by EmWeb/Compiler into EmWeb/Server 

* run* time database. 
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* desciipcor • public symbol of archive object component descriptor 

* da tap • pointer to archive data component 

* Returns EWS_STATUS OK on success, else error code (TBD) 
V 

extern EvsStatus e wsDocument Ins tallAr chive 

( Evs Archive descriptor , EvsArchiveData da tap ); 

ttifdef EW_CONFIG_OPTION_CLEANUP 

/• 

* ewsDocumentRemoveAr chive 

* Removes previously installed document archive from run- time database. 

* descriptor - public symbol of archive object component descriptor 
« 

* Returns EWS_STATUS OK on success, else error code (TBD) 
V 

extern EvsStatus ewsDocumentRemoveAr chive ( EvsArchive descriptor ) ; 

#endif /* EW_CONFIG_0P7I0N_CLEANUP */ 

/• 

* evsDocumentArchiveName 
• 

* Returns the archive name as stored in the archive by the EmWeb/Compiler , 

* or NULL on error, 
*/ 

extern const char * evsDocumentArchiveName { const uinte *datap >; 
/• 

* evsDocumentArchiveDate 
* 

* Returns the RFC1123 date string stored in the archive header generated 

* by the EmWeb/Compiler vhen the archive vas created, or NULL on error. 

* There is also a routine for the less preferred RFC1036 representation. 
•/ 

extern const char * evsDocumentArchiveDate ( const uinte «datap ) ; 
extern const char * evsDocumentArchiveDatel036 ( const uintB *datap ); 

#ifdef EWj:ONFIGJ3PTI0N_DEMAND_L0ADING 

/ • * * • ™ * 

« 

* DEMAND LOADING 
* 

* In order to implement on-demand archive loading, the application may 

* register document URLs with the EmWeb/Server which are valid but not 

* loaded. This is done by invoking ewsDocumentRegister () . If a registered 

* document is requested, the EmWeb/Server will notify the application by 

* invoking evaDocument Fault () . At this point, the application may load 

* a new archive (possibly removing a previously installed archive to make 
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* room) . When the archive containing the page is installed, the EmWeb/Server 

* will automatically complete processing the request. The request can be 

* aborted either immediately by returning EWA_STATUS_ERROR from the 

* ewaDocumentFault () function, or by invoking""evsNetHTTPAbort 0 . 
* 

* Once a document is registered, there is no need to re-register it in the 

* event that the corresponding archive is removed. EmWeb/Server remembers 

* that the document has been registered as dynamically loadable. However, 

* the application may deregister a document by invoking 

* ewsDocumentDeregister 0 . 



* ewsDocumentRegister 

* Registers the URL of a document with the run -time database indicating that 

* the given document is valid but not currently loaded into memory. 
• 

* url - local URL of document to be registered 

* handle - application -specific handle passed to ewaDocumentFault 0 
« 

* Returns document descriptor, or EWS DOCUMENT NULL on failure. 
•/ 

extern EvsDocument ewsDocumentRegister 

( const char * url, EwaDocumentHandle handle ); 

/• 

* ewsDocumentDeregister 

* Unregisters a previously registered document from the run-time database 

* indicating that the given dynamically -loadable document is no longer valid. 
* 

* document - descriptor of document to be deregisteied 

* Returns EWS STATUS OK on success, else error code (TBD) . 
«/ 

extern EwsStatus ewsDocumentDeregister ( EwsDocument document ) ; 



tfifndef ewaDocumentFault 
/• 

* ewaDocumentFault (Application) 

* This function must be provided by the application, and is invoked by 

* EmWeb/Server when a registered document has been requested but is not 

* currently loaded into memory. 
• 

* context - context of request for document 

« handle \ application -specific handle from ewsDocumentRegister O 

* 

* Returns EWA_STATU5_OK on success, EWA_STATUS_OX_YIELD on success with 

* request for~Emweb/server to yield the CPU, or EWA_STATUS_ERROR on failure. 

* If failure status is returned, the request is aborted. Otherwise, the 

* request will complete after the document has been loaded into memory. 
V 

extern EwaStatus ewaDocumentFault 

( EwsContext context, EwaDocumentHandle handle ); 
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ftendif 

#endif /• EWj:ONFIGJ)PTIONJ)EMAND_LOADING */ 
ftifdef EW_CONFIG_OPTION_CLONING 

/ •••• 

« 

* DOCUMENT CLONING 
» 

* Documents may be cloned and assigned to a new URL. This allows multiple 
« instances of a document to exist. An application* specif ic handle can be 

* used to identify an instance of a document from the request context. 
• 

* The application clones a document by invoking ewsDocumentClone () . The 
« cloned document may be removed by invoking ewsDocumentRemove () . All 

* clones created from documents in an archive must be removed before the 

* archive can be removed. 
* 

• — • / 

/• 

* ewsDocumentClone 

* Clone an existing document under a new url in the database. 

w 

* baseurl •" URL of existing document 

* newuil • URL of new cloned document 

* handle • application- specific handle available in request context 
* 

* Returns document descriptor or EWS_DOCUMENT_NULL on error. 
•/ 

extern EwsDocument ewsDocumentClone 

( const char • baseurl, const char * newurl, EvaDocumentHandle handle ); 

/• 

* ewsDocumentRemove 

* Remove a previously cloned document fxom the database. 

* document • document descriptor of previously cloned document. 
* 

* Returns £WS_STATUS_OK on success, else error code (TBD) . 
*/ 

extern EvsStatus ewsDocumentRemove ( EwsDocument document ) ; 
ftendif /• EW_CONFIG_OPTI0N_CL0NING •/ 

#ifdef EW CONFIG OPTION DOCUMENT_DATA 

/• / ' 

* ewsDocumentData 

* Retrieve pointer to raw data and data size from URL in archive 
• 

* url * url of document 

* bytesp - output: si2e of document (as-is in archive) in bytes 

* datapp * output: pointer to start of document 
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* Returns EWS STATUS OK on success, else eizox code (TBD) . 
•/ 

extern EwsStatus evsDocumentData ( const char * url 

,uint32 •bytesp 

,const uint8 ••datapp ); 
#endif /* E W_CONFI G_OPTI ON_DOCUMENT_DATA «/ 

#ifdef EW C0NFIG_0PTI0NJ50OJMENT_SET_REALM 

#ifdef EW2C0NFIG""0PTI0N""AUTH 

/• 

* evsDocumentSetRealm 

* Set or change authentication realm of document at run- time. 

* url - url of document 

* realm - name of authentication realm, or NULL (or to disable. 

* Returns EWS STATUS_OK on success, else error code. 
*/ 

extern EvsStatus evsDocumentSetRealm (. const char * uil, const char •realm ); 

flendif /• EW_CONFIG_OPTION_AUTH */ 

flendif /* EW_CONFI G^OPTI ON JDO CUMENT_S ET_REALM */ 

#endif h _EW5J)OCH •/ 



A-2.6. src/include/ews_auth.h 

This file contains the definitions and prototypes of the authorization and security functions 
of the application interface. 

evs_auth.h,V 1.1B 1997/05/21 21:55:44 ian Exp 

Product: EmWeb 
Release: R2_i 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
waltham, MA 02154 

(617) B93-786B 

sales©agrana t ♦ com, suppor t©agranat . com 
http : //vw . agranat . com/ 

EmWeb/server application interface to authorization database 
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# i fnde f EWS_AUTH_H_ 
^define ^NSJOTHjT 

Ufdef EWj:ONFIG_OPTION_AUTH 

^include "ew_types.h" 
ftinclude "ew_conf ig .h" 



HTTP Authorization techniques are discussed in the HTTP specifications. 
Knowledge of these principles are essential for correct use of these ■ 
authorization interfaces. 

One or more HTML documents can be assocated with a single "realm". A realm 
is a case -sensitive ascii string that defines a "protection space- for ^he 
associated document (s) . 

Each realm can have zero or more authentication entries associated with it. 
If a realm has no authentication entries, then it is considered 
-unprotected" by the server, and its acess will always be granted to any 
requesting client. 

For those realms with authentication entries, any client that attempts to 
access any document associated with that realm will be required to 
authenticate itself. To authenticate, the client must send authentication 
parameters that validate against at least one authentication entry for that 
document's realm. Clients that do not authenticate are not served the 
requested document. 

For example, assume a realm exists called *foo M . It has three 
authentication entries associated with it (2 using the "basic" scheme 
defined in the HTTP specification, and one other ficticious type) : 

REALM: "foo" 

Authentication Entry 1: 
Type: -basic" 

parameters: username«-useri- 
Pa s s wor d ■ - gue s t " 
EwaAuthHandle: application' s entry l identifier > 

Authentication Entry 2: 
Type: "future" 
parameters: index«37 

cookie* "837I8U9" 
. token- -S37" 

EwaAuthHandle: application's entry2 identified 

Authentication Entry 3: 
Type: "basic" 
r parameters: Username- "Sinclair" 
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• Password* "babylon" 

* EwaAuthHandle: application's entry3 identified 
• 

• When a client attempts to access a document associated with xealm "foo", it 

• will need to authenticate against one of the above entries. Which one the 

* client authenticates against is at its disgression. 
« 

• When a client does authenticate against one of the above entries, the 

* EwaAuthHandle for that entry is stored in the current context for the 

* document (EwsContext) . The datatype of this EwaAuthHandle is 

• implementation -defined. 

* * */ 

* Types & Constants 

. — «- - ./ 

/* 

♦ Defines the authorization schemes supported by the EmWeb server. 

* New schemes will be added as they ate supported. 

typedef enum 
{ 

# ifdef EW_CONFIG_OPTION_AUTH_BASIC 
ewsAuthSchemeBasic, 

# endif /* EW_CONFIG_OPTION_AUTH_BASIC */ 

# ifdef EW_CONFIGJ>PTION_AUTH_DIGEST 
ewsAu ths chemeDi ges t , 

# endif /* EW_CONFIGJDPTI0N_AUTKJ>IGEST •/ 

# ifdef EW_C0NFIGJ)PTION_AUTH_MBASIC 
ewsAu thSchemeManualBasi c , 

# endif /* EW_CONFIG_OPTION_AUTH_MBASIC */ 

# ifdef EW_CONFIG_OPTION_AOTHJ*DIGEST 
ewsAuthSchemeManualDigest, 

If endif /• EW_CONFIG_OPTION_AOTH_MDIGEST •/ 

ewsAuthMaxScheme /■ count of supported schemes */ 

) EwsAuthScheme; 

* this structure defines parameters fox all the supported 

• authorization types. New parameters will be added in 

• to this structure in the future 
•/ 

typedef union 
( 

ttifdef EW_CONFIG_OPTION_AUTH_BASlC 
struct ~ 
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{ 

char *usezName; 
char *passWord; 
} basic; 

flendif /• EW_CONFIG_OFTION_AUTH_BASIC */ 
#if defined (EW_CONFIG_OPTION_AUTH_DIGEST) H 
defined (EW_CONFIG_OPTION.AUTH_MDIGEST) 

struct 

{ 

char *usezName; 
char *passWord; 

ft ifdef EWJXNFIG_OPTIONJVUTH_DIGEST_H 

boolean digestRequired; /* require client message data verification */ 
# endif /• EW_CONFI G_OPTI ON_AUTHJD I GES T_M */ 

} digest; 

#endif /* EW_CONFIGJ)PTION_AUTH_DIG£ST II EW_CONFIG_OPTION_AUTH_MDIGEST */ 

char reservedl; 
J EwsAuthParameters; 



* This structure represents a single authorization entry. 
•/ 

typedef struct 
{ 

EwsAuthScheme scheme; 
EwsAuthParameters params; 

EvaAuthHandle handle; /♦ user defined •/ 
) EvsAuthorization; 



/. .................................................. ....... 

• Interfaces 

. ...... / 



h 

* evsAuthRegister 

* And a new authorization entry to the realm. 

* realm • Input, case sensitive asciiz realm name. 

* authorization • Input, buffer containing authorization entry information. 

* This buffer is free for use by the caller on return. 

* Returns a non*NULL handle to the authorization entry, or NULL on failure. 
*/ 

extern EwsAuthHandle ewsAuthRegister 

( const char *realm,const EwsAuthorization "authorization ); 
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* evsAuthRemove 

* Deletes a particular authentication entry identified by handle. 
« 

* handle - Input, The handle that was returned by evsAuthRegistei 0 for 

* this entry. 

* Returns EWS_STATUS_OK on success, else failure code. 
•/ 

extern Evsstatus evsAuthRemove { EwsAuthKandle handle ) ; 
/* 

« evsAuthRealmEnable 

* Enables a realm to restrict access to documents (restricted by default) 
* 

* realm - Input, the realm to restrict 
« 

* Returns EWS STATUS OK on success, else failure code 
*/ 

extern Evsstatus evsAuthRealmEnable ( const char * realm ) ; 

h 

* evsAuthRealmDi sable 

* Disables a realm causing documents in that realm to be generally accessible. 
* 

* realm - Input, the realm to restrict 
• 

* Returns EWS_STATUS OK on success, else failure code 
extern Evsstatus evsAuthRealmDi sable ( const char * realm ) ; 

/* 

* evaAuthRealmOualif ier 

* Returns realm qualifier string to append to realm names, or NULL 
•/ 

tfifndef evaAuthRealmQualif ier 

extern const char -evaAuthRealmQualif ier ( void ) ; 
#endif /* evaAuthRealmQualif ier •/ 

$if defined (EW_CONFIG_OPTI0N_AOTH_DIGEST) \ 
|| defined (EW"(X>NFIG_0PTI0N_AUTH_MDIGEST) 

« evaAuthNonceCreate 

* Create raw input used to generate one-time authentication challenges 

* given a request context and realm. 

* context • request context 

* realm * null- terminated string containing name of realm 

* noncep • pointer to application- specific nonce parameters 
• 

* No return value 
•/ 

extern void evaAuthNonceCreate 

( EvsContext context, const char * realm, EvaAuthNonce *noncep ); 
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« ewaAuthNonceCheck 

* validate that the previously created nonce is valid given the current 
« request. 

« 

* context - request context 

* realm - null -terminated string containing name of realm 

* noncep - pointer to requested nonce parameters 

* count - previous use count (0, 1, ...) of nonce value 
• 

* Returns ewaAuthNonceOK on success, ewaAuthNonceStale if valid but expired, 

* or ewaAuthNonceDenied if nonce is not permitted given the request context. 
•/ 

typedef enum EwaAuthNonceStatus_e 
{ 

ewaAuthNonceOK, /• nonce value valid for request */ 
ewaAuthNonceLastOX, /• nonce value valid, but won't be again */ 
ewaAuthNonceStale, /* nonce value is stale, generate new nonce •/ 
ewaAuthNonceDenied /* nonce value is invalid */ 
) EwaAuthNonceStatus; 

extern EwaAuthNonceStatus ewaAuthNonceCheck 

( EwsContext context, const chai .• realm, EwaAuthNonce *noncep, uintf count ); 
flendif /* EW_CONFIGJ>PTION_AUTH_(M) DIGEST •/ 

#ifdef EW CONFIG OPTI0N_AUTHJ4BASIC 

h 

e vaAu thChecKBa sic 

Given the current context, realm, base64 cookie, and optionally 
decoded username/passvord text, determine if the authorization should 
be gzanted or denied. 

context • (input) request context 

realm * (input) null* terminated string containing name of realm 
basicCookie • (input) the base$4 encoding of the text usez ;password, 

as described in the HTTP RFC. 
useiName ■ (input) if EWJTONFIGJ)PTION_AUTH_MBASIC_I>ECODE is defined, 
then this parameter points to a null terminated string 
containing the user name decoded from the basicCookie. If 
EW_CONFIG_OPTI ON_AUTH_MBAS I C_DECODE is not defined, this 
is~a HULL pointer, 
password - (input) if EW_CONFIG_OPT20N_AOTHJMBASIC_DECODE is defined, 
then this parameter points to a null terminated string 
containing the password decoded from the basicCookie. If 
EW_CONFIG_OPTION_AUTH_MBASIC__DECODE is not defined, this 
. is a NULL~pointer . 

Return value: boolean, if TRUE, then the authorization is granted and 
the document is served. Otherwise, authorization is denied. 

This function can be supended by ewsSuspend 0 . It's return values 
are ignored, and it will be recalled with the same parameters when 
the context is resumed using ewsResumeO. 
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tfifndef ewaAuthCheckBasic 

extern boolean ewaAuthCheckBasic ( EwsContext context 

, const char -realm 
,const char -basicCookie 
, const char -userName 
, const char -password ); 

flendif /* ewaAuthCheckBasic */ 
#endif /* EW_CONFIG_OPTION_AUTH_MBASIC -/ 

flifdef EW CONFIG_OFTION_AUTH__MDIGEST 
1+ 

ewaAuthCheckDigest 

Given the current context, realm, username, and nonce, 
return the corresponding MD5 hash of the username: realm rpassword 
text. This text will be used by the server to verify the 
authorization attempt by the client, 

context ■ (input) request context 

realm • (input) null- terminated, string containing name of realm 

taken from the request header, 
nonce • (input) null- terminated string containing the nonce that 

was supplied to the server. 
userName - (input) this parameter points to a null terminated string 
containing the user name as supplied in the authorization 
request header. 

digest • (output) on return, -digest will point to a null- terminated 
ascii text string representing the MD5 checksum of the 
username, realm and password (MD5 ( username :realm:password) ) 
as described in the Digest Access Authentication RFC2069 

Return value: boolean, if TRUE, then -digest points to a valid MD5 hash of 
username: realm: password, which will be used by the server to complete 
the authorization process (which may or may not be granted). If FALSE, 
the authorization is immediately denied. 

This function can be supended by ewsSuspendO . It's return values 
are ignored, and it will be recalled with the same parameters when 
the context is resumed using ewsResumeO. 

/ 

#ifndef ewaAuthCheckDigest 

extern boolean ewaAuthCheckDigest ( EwsContext context 

, const char -realm 
, const EwaAuthNonce -noncep 
, const char -userName 
, const char --digest ); 

#endif /* ewaAuthCheckDigest */ 

#endif /* EW_CONFIG_omON_AOTH_MDIGEST •/ 



#ifdef E W_C0NFI G_OPTION_AUTHJVERl FY 
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* ewaAuthverifySecurity 

* Called _af tei_ the server has determined that the authorization 

* will be granted for the request, this function allows the application 

* to "short circuit 1 ' the authorization based on information about 

* the request (eg, IP address of client, etc.). The method used 

* to determine whether ox not the request is authorized is proprietary 

* to the application. 
* 

* context - (input) request context 

* realm - (input) null- terminated string containing name of realm 

* taken from the request header. 
* 

* He turn value: boolean, if TRUE, then the authorization is granted, and 

* the document will be served to the client. If FALSE, 

* the authorization is immediately denied. 
* 

* This function can be supended by ewsSuspendO . It's return values 

* are ignored, and it will be recalled with the same parameters when 

* the context is resumed using evsResume () . 
•/ 

ftifndef ewaAuthverifySecurity 

extern boolean ewaAuthverifySecurity ( EwsContext context 

, const char * realm ); 

#ehdif /* ewaAuthverifySecurity •/ 
#endif /• EW_CONFIG OPTION_AUTH_VERIFY •/ 



Local Variables: *** 
*** mode: c *** 
••• tab-width: 4 *** 
•** End: *** 
•/ 

#endif /• EW_OONFIGjOPTION_AOTH •/ 
#endif /« _EWS_AUTH_H_ */ 

A-2.7. src/include/ews_ctxt.h 

This file contains definitions and prototypes of the request context access functions of the 
application interface. 

/• 

* ews_ctxt.h,v i.14 1997/05/25 23:30:32 giusti Exp 

* Product: EmWeb 

• Release: R2_i 
« 

• CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
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* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC ♦ 

* Copyright (C) 1996, 1997 Agianat Systems, Inc. 

* All Rights Reserved 

* Agxanat Systems, Inc. 

* 1345 Main Street 

* waltham, MA 02154 

* (617) 893-7868 

* sales@agxanat.com, suppoxtQagxanat.com 

* http://wwv.agxanat.com/ 

* EmWeb/Sexvex public definitions 

•/ 

flifndef _EWS_CONTEXT_H 
^define ~EWS_CONTEXT_H 

^include »ev_types .h" 
^include *ev_conf ig .h M 
^include M evs_def.h M 

* REQUEST CONTEXT 
* 

* Each HTTP request received by EmWeb/Server is assigned a unique context. 

* The context structure contains all the information pertaining to the 

* request, as well as internal state information regarding the processing 

* state of the request. 
* 

* API functions axe provided to give the application some visibility into 

* the current context state. 
*/ 

/• 

* ewsContextNetHandle 

* Return the application- specif ic network handle provided to EmWeb/Server 

* by the application in evsNetHTTPStart 0 . 
•/ 

EwaNetHandle ewsContextNetHandle { EvsContext context ); 

#if defined (EW CONFIG^OPTI ON_DEMAND_LOADING ) \ 
1 1 defined Tew CONFIG_OPTION_CLONING ) 

/. 

* evsContextDocumentHandle 

* Return the application*specif ic document handle provided, to EmWeb/Server 

* by the application in evsDocumentRegister 0 or ewsDocumentClone 0 . 
*/ 

EwaDocumentHandle ewsContextDocumentHandle ( EvsContext context ) ; 
ffendif /• EW CONFIG OPTION DEMAND LOADING || EWj:ONFIGJ>PTIONCLONING V 



Copyright Q1997Agranat Systems, Inc. Pag* 131 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 



PCT/US97/ 13817 



EmWeb 1 " Functional Specification Confidential src/include/ews_ctxt.h 



#ifdef EW CONFIG OPTION AUTH 
/* 

* evsContextAuthHandle 

* Return che application- specific authorization handle provided to 

* EmWeb/Server by the application in evsAuthRegister () . 
•/ 

EvaAuthHandle evsContextAuthHandle ( EvsContext context > ; 
ftendif /• EW_CONFIG_OPTIOH_AUTH •/ 

#ifdef EW_CONFIG_OPTION_SCHED_SUSP RES 
/♦ 

* evsContextlsResuming 

* Return TRUE if EmWeb/Server is resuming (as a result of evsResumeO) after 

* the context was suspended (as a result of ewsSuspendO ) . 
*/ 

boolean evsContextlsResuming ( EwsContext context ) ; 
#endif /• EW_CONFIG_0PTION_SCHED_SUSP_RES */ 

#if defined (EW_CONFIG_OPTION_STRING) I I defined CEW_CONFIG_OPTION_INCLUDE) 

* evsContextlterations 

* Returns the iteration count corresponding for EMWSB_ITERATE 
*/ 

uint32 evsContextlterations ( EvsContext context ); 

#endif /• EW_CONFIG_OPTION_STRING I | EW_CONrIG_0?TION_INCLUDE */ 

#ifdef EW CONFIG_OPTION CONTEXT_SEND_REPLY 

* evsContextSendReply 

* Serves specified local path URL to brovser in response to form submission 

* or rav CGI. 
•/ 

EvsStatus evsContextSendReply ( EvsContext context, char * url ); 
#endif /• EW_C0NFIG_OPTION_C0NTEXT_SEND_REPLY •/ 

#if defined ( EW_CONFIG_OPTION_FILE_GET ) \ 
|| defined ( EW_CONFIG_OPTION_FILE_PUT ) \ 
|| defined ( EW_CONFIG_OPTION_FH.E_DSl.ETE ) 
EvsStatus evsContextSetFile( EvsContext context 

,EvsFileParamsP params 
) ; 

#endif /* EW_CONFIG_OPTION_FILE_xxx */ 



* The following" functions extract the corresponding fields from the KTTP/1.0 

* request header, if present, into an application -provided buffer. Each of 

* these functions return the number of bytes in the actual header value, even 

* if this is larger than the application -provided buffer (though ErnWeb/Server 

* will not overwrite the applicatoin buffer by honoring the buffer length) . 

* If the header is not present, zero is returned. The application may 

* specify a zero- length buffer in order to determine the size of the header 

* value. The returned value begins with the first non-vhi tespace following 

* the HTTP header and ends just before the terminating end-of*line 
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• character (s) . 
*/ 

#ifdef EW_CONFIG_0PTI0N_CONTEXT_DATE 

uintf evsContextDate ( EvsContext context, char * da tap, uintf length ); 
*endif /• EW_CONFIG_OmON_CONTm_DAT£ */ 
tfifdef EW_CONFIG_OPTION_CONTEXT_PRAGMA 

uintf evsContextPragma ( EvsContext context, chai *datap, uintf length ); 
#endif /* EW_CONFI G_OPTI ON_CONTEXT_PRAGMA •/ 
#ifdef EW_CONFIG_OPTI ON_COOTEXT_FROM 

uintf evsContextFrom { EvsContext context, chaz *datap, uintf length ) ; 
#endif /* EW_CONFIG_OPTION_CONTEXT_FROM */ 

aifdef ew_config_option_cootext_if2modified_since 
uintf evsContextlfModifiedSince 

( EvsContext context, char *datap, uintf length ) ; 
#endif /* EW_CONFIG_OPTION_CONTEXT_IF_MODIFIED_SINCE */ 
#ifdef EW_CONFIG_OFTI ON_CX3NTEXT_REFERER 

uintf evsContextfleferer ( EvsContext context, char *datap, uintf length ); 
#endif /• EW_CONFIG_OPTION_COOTEXT_REFERER •/ 

#ifdef ew_cootig_option_context_us!r_agent 

uintf ewsContextUserAgent { EvsContext context, char «datap, uintf length ) ; 
#endif /• EW_CONFI G_OPTI ON_CONTEXT_US ER_AGENT */ 
#ifdef EW_CONFIG_OPTION_COOTEXT_HOST. 

uintf evsContextHost ( EvsContext context, char *datap, uintf length ); 
#endif /* EW_CONFIG_OPTION_CONTEXT_HOST */ 

#endif /• EWS_COOTEXT_H •/ 



A-2.8. src/include/ews_cgi.h 

This file contains the definitions and prototypes of the raw CGI functions of the application 
interface. 



evs_cgi.h,v 1.22 1997/03/29 I7:50i49 ian Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agzanat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

salesttagranat.com, suppoitOagranat.com 
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* http://vww.agranat.com/ 

* EmWeb/Server application interface to zaw CGI 

#ifndef _ews_cgi_h 
#def ine _EWS~CGl2n 

^include "ew_types .h" 

/ * * 

* CGI INTERFACE 
* 

* EmWeb supports a raw CGI interface for imagemap and various special 

* application-defined CGI capabilities. 
• 

* The EmWeb/Compiler creates CGI URLs from specifications provided in 

* _ACCESS files. The application provides two functions for each CGI URL. 

* First, there is the CGI start function. This is invoked by the 

* EmWeb/Server to mark the start of a new CGI request. Second, there is the 

* CGI data function. This is invoked by the EcnWeb/Servei one or more times 

* to pass network buffers containing raw CGI xequest data to the application. 

* The end of request data is indicated by an EWA_NET_BUFFER_NULL EwaKetBuf f er . 

* " — 

* The CGI application uses the ewsCGIDataO function to transmit response data 

* to the network. 



h 

* ewaCGIStart 

-* ... 

* This per • CGI function is provided by the application. It is invoked by 

* EmWeb/Server at the stare of a new request to the corresponding CGI URL. 

* the application may return an application-specific handle. 
* 

* context • context of current request 
• 

* Returns application -specific handle to be used by EmWeb/Server in 

* subsequent calls to ewaCGIData. 
•/ 

typedef EwaCGIHandle EwaCGIStart_f ( EwsContext context ); 
/* 

* ewaCGIData 
* 

* This per? CGI function is provided by the application. It is invoked by 

* EmWeb/Server zero or more times to pass raw CGI request data to the 

* application. 
* 

* cgi_handle - application -specific handle as defined by ewaCGIStart 

* buffer • application buffer containing all or part of the raw CGI 

* request data 
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* No retuzn value 

typedef void EwaCGIData_f ( EwaCGIHandle cgi_handle, EvaNetBuffer buff ex ) ; 

tfifdef EW_CONFIG_OPTION_CGI 

/• 

* ewsCGISendStatus 

* This optional call causes the EmWeb/Servex to construct and send an 

* appxopxiate HTTP status headex (and possibly othex sexvex -genexated 

* headers). It must be followed by one ox more calls to ewsCGIData() to send 

* additional headex infoxmation and optional body content. (Mote that a call 

* to ewsCGIDataO must not pxecede the invocation of this function). 
« 

* Note; If the application desixes complete contxol of the response, it may 

* simply send all header information itself using ewsCGIDataO instead of 

* invoking this function. 

* context • context of request 

* status • 3 -digit status code followed by reason string 

* stxing • stxing containing additional headers and/or data, or NULL 
* 

* Returns EWS_STATUS_OK on success, else exiox code (TBD) . 
#/ 

extexn EvsStatus ewsCGISendStatus 

( EwsContext context, const chax * status, const chax * stxing ); 



* ewsCGIData 

* This function is called by a xaw CGI application one ox more times to send 

« xaw CGI response data to the browser client. The application is xesponsible 

* fox thxottling its use of the CPU. Mote that xesponse data may include xav 

* HTTP headers as well as data. Thexefoxe, a CR-NL sequence must be 

* txansmitted to piopexly delimit the header portion of the response from 

* any returned data. 

* Mote that ewsCGISendStatus 0 may be called once before any calls to 

* ewsCGIDataO to generate standaxd HTTP headexs. Othexwise, the application 

* must genexate all standaxd headexs itself. 

* Note that sending a EWAJ*ET_BUFFER_NULL texminates the xequest. 

* context • context of xequest 

* buffex • buffex containing data to send, ox EWA_NET_BUFFER_NULL 

* if this is the last buffex in the response? 

* No return value 

extexn EwsStatus ewsCGIData ( EwsContext context, EwaNetBuf f ex buffex ) ; 
/* 

* ewsCGIRedixect 

* This call causes the EmWeb/Sexvex to respond to the bxowser with the 
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* document specified by the URL (if local), or with a redirect (if not). 

* This function will terminate the request. Note that this feature can not 

* be used in conjunction with ewsCGIDataO or ewsCGIStatus {) . 
* 

* context - context of request 

* url • URL for redirect 
* 

* Returns EWS_STATUS OK on success, else error code (TBD) . 

extern EwsStatus ewsOGIRedirect ( EwsContext context, const char *url ); 
#ifdef EW_CONFIG_OPTION CGI_SERVER_SOFTWARE 

* ewsCGIServer software 
* 

* Returns a string corresponding to the server software such as 

* *Agranat-EmWeb/R2_l" 
*/ 

extern const char * ewsCGIServer Software ( void ) ; 
#endif /* EW_CONFIGJ3PTION_CGI_SERVER w SOFTWARE */ 

#ifdef EW CONFIG_OPTION_CGI_GATEWAY_INTERFACE 

h 

* ewsCGIGatewaylnterface 
• 

* Returns a string corresponding to the CGI version "CGI/1.0" 
*/ 

extern const char *ewsCGIGatewaylnterface ( void ); 
#endif /* ew_config_option_cgi_gateway_interface */ 

sifdef ew_config option_cgi.server_protocol 

* ewsCGIServerProtocol 
« 

* context ■ context of request 

* datap - pointer to data buffer 

* length - size of data buffer (may be zero) 
• 

* Returns number of bytes in actual protocol string, or zero if not present. 
*/ 

extern uintf ewsCGIServerProtocol 

( EwsContext context, char *datap, uintf length ); 
#endif /* ew_config_option_cgi_server_protocol •/ 

#ifdef ew_config option cgi_request_method 

* ewsCGIRequestMethod 
# 

* context - context of request 

* datap - pointer to data buffer 

* length • size of data buffer (may be zero) 
* 

* Returns number of bytes in actual request method, or zero if not present. 



Copyright 0 1997 Agranat Systems, Inc. Page 1 36 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 



PCT/US97/13817 



- 165 - 



EmWeb' M Functional Specification 



Confidential 



src/indude/ews..cgi.h 



extern uintf ewsCGIRequestMethod 

( EwsContext context, char * da tap, uintf length ); 
flendif /* EW_CONFIG_OPTION_CGIJIEQUEST_METHOD */ 

#ifdef EW_CONFIG_OPTION CGI PATH_INFO 
/* 

* ewsCGIPathlnfo 
* 

* context - context of request 

* Returns pointer to Pathlnfo string, or NULL if not present 
V 

extern const char * ewsCGIPathlnfo { EwsContext context ); 
#endif /* EW_C0NFIG_Om0N_CGIJ?ATH_INFO */ 

#ifdef EW_CONFIG OPTION_CGI_S CRI PT_NAME 
/* 

* ewsCGIScriptName 

* context • context of request 



* Returns pointer to script name string 

extern const char * ewsCGIScriptName* ( EwsContext context ) ; 
flendif /* EW_C0NFIG_OPTI0N_CCI_SCRIPT_NAME */ 

ftifdef EW_CONFIG_OPTION CGI QU£RY_STRING 

* ewsCGIOueryString 

* context • context of request 

* datap • pointer to data buffer 

* length - size of data buffer (may be zero) 
* 

* Returns number of bytes in actual query string, or zero if not present. 
*/ 

extern uintf ewsCGIOueryString 

( EwsContext context, char *datap, uintf length ); 
#endif h EW_CONFIG_OPTION_CGI_QUERY_STRING */ 

#ifdef EW CONFIG OPTION CGI CONTENT TYPE 
/* 

* evsCGIContentType 



• Returns number of bytes in actual content type, or zero if not present. 
•/ 

extern uintf ewsCGIContentType 

( EwsContext context, char *datap, uintf length ); 
flendif /• EW CONFIG OPTION CGI_CONT£NTJTYPE •/ 



* context 

• datap 

♦ length 



• context of request 

• pointer to data buffer 

- size of data buffer (may be zero) 
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#ifdef EW_CONFIG OPTION CGI CONTENT LENGTH 
/. ~ ~ . " • 

* evsCGIContentLength 

•# 

* context - context of request 
* 

« Returns content length as specified by client, or zero if not present, 

* or EWS CGI CONTENT LENGTH CHUNKED if chunked. 
*/ 

#define EWS_CGI_COOTENT_LENGTH_CHUNKED Oxffffffff 
extern uint32 evsCGIContentLength ( EvsContext context ) ; 
#endif /* EW_CONFI G_OPTI ON_CG I_CONTENT_LENGTH •'/ 

#ifdef EW CONFIG_OPTION CGI_CONTENT_ENCODING 

* ewsCGIContentEncoding 

* - 

* context - context of request 

* da tap - pointer to data buffer 

* length - size of data buffer- (may be zero) 
♦ 

* Returns number of bytes in actual content encoding, or zero if noc present. 
*/ 

extern uintf ewsCGIContentEncoding 

( EvsContext context, char »datap, uintf length ) ; 
#endif /• EW_TONFIG_OPTION_CGI_CONTENT_EN CODING '/ 

#endif /• ew_config_optionj:gi •/ 
#endif /• _EWS_CGI_H V 
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ev__db.h Sat Jun 28 07:59:50 1997 .1 

/• 

• $Id: ew_db.h,v 1.30 1997/06/28 11:59:50 ian Exp $ 

• Product: BnWeb 

• Release: $Name: $ 
* 

• %CopyRight% 

• Eroweb database definitions 

•/ ■ 
flifndef _EV?_DB_H 
*def ine _ew_db_h 

^include •ew_common.h" 
^include M ew_types.h" 
^include M ew_f orro.h" 
^include i, ew_imap.h' , 
^include "ews_def.h" 
^include "ews_cgi.h" 

* 

• DOCUMENT ARCHIVE 
* 

• An EmWeb document archive contains two parts. These are the archive data 

• component and the archive object -component. 
• 

• The archive object component contains all the run-time object code 

• associated with an archive. A public symbol (determined by EmWeb/ Compiler 

• on a per-archive basis) points to an archive descriptor (EwsArchive) . This 

• contains all of the linkage required by the Eraweb/Server to access the 

• archive-specific run-time object code. 
» 

• The archive data component contains all the static data describing 

• individual documents in the archive. The data component is an endian- 

• independent fully relocatable contiguous block of constant data 

• analogous to a file. In fact, it could be a file. The data component 

• begins with an archive header and contains one or more documents. 

* ••• • • • •••••/ 

/« 

• Archive Descriptor 
• 

• Each archive has a unique archive descriptor in the object component of the 

• archive. The archive descriptor is a list of functions called by the 

• EmWeb/Server to execute archive-specific object code while processing 

• requests for documents in the archive. Unsupported functions (i.e. 

• features not selected when the EmWeb/ Compiler was built) are represented 

• by a NULL pointer. 
•/ 

typedef const void T EmWebString_f { EwsContext context, uint32 index ); 
typedef const char • EmWeblnclude^f ( EwsContext context, uint32 index ); 

/• Cookie Attribute structure, element of emweb_cookie_tbl [] */ 

typedef struct EwCookieAttr_s { 
char •name- 
char ♦path; 

] EwCookieAt tributes; 



typedef struct EmwebCGITable_s 
I 
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EwaCGlDatflL-f *data_f; 
) EmWebCCITable, ♦EmwebCGITableP; 

typedef struct EwsArchive_s 

1 uint32 magic; /• Magic number for archive validation */ 

* define EW^RCHIVE^OBJECT^GIC <('E'«24) I CW«16) I Co'«8) I 'b' ) 

uintB versionjnaj; /* Archive version (major /minor) */ 

uint8 versionjnin; 

ft define EW^R CHIVE_vers I 0*O*AJ 1 
ft define EW.^CTrVELVERSIO*L_MIN 1 

uintB compilerjnaj ; /• EroWeb/ Compiler version <major/minor) •/ 

uint8 compiler_min; 

ft define EWLARCH IVE_J>ATE_1 1 2 3_S I ZE 32 

char date_1123[EW^ARCKIVELPATE_ai23«SIZE] ; /• creation date •/ 

* Archive-specific <£MWEB_STRING> dispatch function. Takes context 

* and index arguments. Index selects the C-code fragment corresponding 

* to an instance of <EMWEB_STRING> • 
•/ 

EmWebString_f *emweb_string; 
/• 

* Archive-specific <EMWEB_INCLUDE> dispatch function. Takes context 

* and index arguments. Index selects the C-code fragment corresponding 

* to an instance of <EMWEB_INCLUDE> . 
•/ 

EmWebInclude_f •emweb_include; 
/* 

* Archive-specific form table. The Form node index is hierarchical and 

* contains a form number and an element number. The form table is 

* indexed by form number (0..n-l). Each form table entry contains a 

* pointer to an array of field elements indexed by one less than the 

* element number. (An element number of zero starts the form, and 

* an element number greater than the number of elements in the form 

* ends the form) • The table contains all the necessary information to 

* serve and submit forms. The emweb_f omuenunL_table is a list of strings 

* corresponding to RADIO and single SELECT values. 
•/ 

const EwFormEntry * emweb_f ontut abl e ; 
uint32 emweb_fonJL-table_size; 
const char **emweb_ fomuenunutable; 
uin t3 2 emweb_f ontuenuirut abl e_s i ze ; 

/* 

* Archive-specific imagemap table. The table represents imagemaps 

* compiled by the Emweb/ Compiler into the archive. This table is 

* indexed by a document node corresponding to the mapfile. The 

* table entry contains a table of rectangular regions which are scanned 

* for matching x,y coordinates to find a match. 

const EwlmageMapTable •emweb_image_table; 
uint32 emveb_image_table_size; 

/* 

* Archive-specific CGI action dispatch table. 
•/ 
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* Reference count - this is initialized to zero by the EmWeb/compiler, 

* but is writable (.data section). This value is incremented for each 

* cloned page It is also incremented for each page currently in use by an 

* uncompleted request. This prevents the application from attempting to 

* remove an archive that is in use. 
*/ 

uint32 ref erence_count ; 

/♦ 

* Document list - this is the anchor of a list of loaded documents and 

* is used exclusively by BnWeb/Server to keep track of per-document nodes 

* created when loading the archive into the open hashed file system. 

* This should be set to EWS_DOCUMENT_NULL by the EmWeb/ Compiler. 

*/ 

EwsDocument document_list ; 

/• 

* Archive-specific cookie table. This table is indexed by data_offset 

* value find in the cookie header node. 
* 

* !!!N0TE: location of this variable is important. For bacward comatibility 

* of archives, it MUST be the last field in this structure. 
•/ 

const EwCookieAttributes ♦emweb_cookie_tbl; 



) EwsArchive_t; 



DOCUMENT ARCHIVE DATA COMPONENT 

The document archive data component is a relocatable, endian-independent, 
static data structure containing compressed documents and information about 
how to access them. 

All 16-bit and 32-bit quantities are represented as arrays of octets. The 
first octet is the most significant {i.e. Big Endian) . 

All pointers are 32-bit (array of four octets) offsets from the beginning of 
the archive data. 

All strings are .asciiz f\0' -terminated ASCII) and are represented by a 
pointer to the string. 

Data storage for strings and various other variable-length components can 
be placed between headers at the discretion of the Emweb/ Compiler. 

The document archive data component takes the following form; 

EwsArchlveHeader 
(optional padding) 

{ EwsDocumentKeader { EwsDocumentNode, ... ) (optional padding) ), ... 

The optional padding can be used to store variable length fields such 
as strings, compressed documents, etc. 

/ 



EwsArchlveHeader 

The archive data component begins with an archive header at offset zero 



/ 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



ev_db.h 



- 170- 

Sat Jun 2B 07:59i50 1997 



• NOTE WELL i KEEP SIZEOF_EWS_ARCHIVEL-HEADER UP TO DATE! 1 t 



typedef struct EwsArchiveHeader_s 



{ 



uinte 



magic [4] ; 



define E^_ARCHXVE_>IAGIC_D 
define EW^ARCHrv?j4AGiq_l 
define EWJIRCHIVELHAGIC_2 
define EW_ J ARCHIVELJ'iAGIC_3 
define EW_ARCHIVELHAGIC 



uintB 
uint8 

uintB 
uinte 

uintB 
uintB 
uintB 
uintB 
uintB 
uintB 



versionjnaj ; 
version_min; 

corapiler_jna j ; 
compiler_min? 



/* Magic number for archive validation •/ 

'E' 

'd' 
'a' 

(CE'«24) | CW'«16) | Cd'«B) |'a') 
/* Archive version (major /minor) */ 



/* EmWeb/Compiler version (major /minor) •/ 



length [4]; /* length of archive, octets •/ 

name_of fset (4] ; /* Offset to archive name string */ 
date_1123_offsetl4] ; /• offset to HTTP date (RFCU23 format) •/ 
date_1036_offseM4] ; /• Offset to HTTP date (RFC1036 format) •/ 
doc_of fset [4) ; /• Offset to first document header •/ 
dict_of f set [4] ; /* Offset to compression dictionary •/ 



} EwsArchiveHeader, * EwsArchiveHe'aderP; 
#define SIZEOF_EWS^ARCHIVE_HEADER 32 /• NEVER use sizeof {) •/ 



EwsDocumentHeader 

For each document in the archive, there is a corresponding document 
header. The first document header is referenced by the doc_offset 
field of the archive header. Subsequent documents are chained together 
using the next_offset field in each document header. The last document 
header in the archive contains a zero in the next_offset field. 

The following types of documents are supported: 



Link 



Mime 



Text 



Index 



Form 



- Generates a redirection URL. The redirection URL is an 
uncompressed string stored in the data area. node_count 
should be zero. 

- Generic (non-text) mime type. The data area contains the mime 
document* The mime content is indicated by the string at 
mime_offset. Compression is optional. node_count should be 
zero. 

- Generic text type. The text may contain EmWeb/ Compiler 
HTML extensions for <EMWEB_STRING>, <EMWEB_INCLUDE> , 
form get processing, etc. Each such extension results in 
one or more document nodes being present describing the 
actions to take at certain points during the processing of 
the data. The data contains the static parts of the 
document and may optionally be compressed. The mime content 
is indicated by the string at mime_offset. 

- An index URL. An absolute path URL is stored as an 
uncompressed string in the data area. node_count should be 
zero. 

- A form action URL. There should not be a data section. 
There will be a FORM node that indicates the index to 
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use for the start/set/submit operations in handling a 
posted form. 

CGI - A CGI URL. There will be a CGI node that indicates the 

index to use for the start/data operations in handling a 
raw CGI request. An optional data section containing 
the uncompressed content of the corresponding URL file 
(if present) is made available in the EwsContext. This 
could be used for CGI imagemap data, for example* 

Imagemap - A mapfile URL. There will be an imagemap node that 

indicates the index into a per-archive imagemap table 
for processing an imagemap. 

Note that any document might be marked hidden. If so, the document is 
not accessible by a client browser directly. Instead, the document is 
used as a building block. It can be cloned, or EMWEB__INCLUDEd • 

NOTE WELL: KEEP SIZEOF_EWS_DOCUMENT_HEAI>ER UP TO DATE! ! 

typedef struct EwsDocumentHeader_s 
{ 

uint8 next_offset 14] ; /• offset to next document or 0 if last ♦/ 

uint8 url^offset 14] ; /• offset to URL string */ 

uint8 document_type; /• type of document •/ 

/♦ If you add a document type, update . ./compiler/readarchive.c */ 
ft define EW_^CHIVE_DOCJTYPE_)4ASK 
ft define EW_ARCHIVE L JDOC_TYPE_LINX 
ft define EW^CHIVEJOCL.TYPE_MIME 

/* EW _ARCHIVE_DOC_TYPE_TEXT 
ft define EW_ARCHIVE_DOC_TYPE_FORM 
ft define EW_ J ARCHIVE_DOC_TYPE_INDEX 
ft define EI1JUICHXVSJDOCLWPSLCGI 
ft define EW_ARCHIVE_DOC_TYPE_IMAGEMAP 
ft define EW^CHIVE_DOCJTYPE_FILE 
ft define EW_^RCHI VE_DOC_FLAG_STATI C 

ft define ew_ARCHIVE_DOC_FLAG_form 
ft define EKJ«CHIVEJ>OC.FIAG_HIDDEN 

uintS comp^jnethod; /• compression method •/ 



OxOF 


/• 


type field */ 


0 


/• 


redirection URL •/ 


1 


/• 


generic mime data type */ 


2 




[obsolete] */ 


4 


/• 


Form action URL •/ 


5 




/• index URL •/ 


8 


/• 


CGI-BIN interface */ 


9 


/• 


Imagemap interface */ 


10 


/• 


local f ilesystem •/ 


0x20 


/• 


treat as static document •/ 


0x4 0 


/• 


contains form node */ 


0x80 


/• 


hidden (internal use) •/ 



ft define EW^ARCHIVEL-COMPRESSIONJJONE 0 
ft define EW _ARCKIVE_COMPRESSIOI^_EMWEB 1 

ft define ew^arcktve^compressio^default ew^archive_compressio^emweb 



uint8 node_count 12] ; /• number of document nodes */ 

uint8 node_of f set [4] ? /• offset to array of document nodes */ 

uinte mime_offset [4] ? /• offset to mime content type string •/ 

uinte realm_offset [4] ;/• offset to authentication realm string •/ 

uint8 orig_length[4] ; /* length of original (uncompressed) data */ 

uint8 data_length [4] ; /* length of compressed data •/ 

uint8 dateuoff set [4] ; /• offset to compressed data •/ 

uint8 hdr_node_count? /• number of document header nodes •/ 

uint8 hdr^flags; /• header specific flags •/ 

ft define EW ) j^cHrVEL^OCLjn)lUCOOKiEL-FLG 0x01 /• 6et if COOKIE hdr present •/ 
ft define EW^ARCHlVE_DOCLXDR_CACHE_FLG 0x02 /• set if CACHE hdr present •/ 
ft define ewlARCHIVE_POC_hdil.vary_flg 0x03 /• set if vary hdr present •/ 

uint8 reserved (21; 
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) EwsDocumentHeader, * Ews Document Header P; 

ftdefine SlZEOF_EWS_DOCTMENT_H£ADER 40 /• never use sizeof ♦/ 
/• 

ewsDocumentNode 

The document header points to an array of zero or more document nodes 
followed by header nodes. 

The node_count field of the document header indicates the number of nodes 
present. Each node represents a special run-time action to be taken by the 
EmWeb/Server when processing requests for the document. When processing 
reaches the specified point in the uncompressed data, the specified action 
is taken. 

Header node contains information needed to create HTTP reply header (s). 
The hdr_count field of the document header indicates the number of hdr_nodes 
present. Each node represents a special run-time action to be taken by the 
Emweb/Server when processing requests for the document. Header nodes are processed 
first as the headers are built into the reply befor data part of the document 
is processed. 

Header nodes are sorted in the archive by type. Compiler sorts and includes 
in the archive only headers of the types for which the flag is set in hdr_flags 
field in the Document Header. 

The document header node(s) immediately follow the ewsDocumentNodes for a 
given document. 

For a cache control header, the first offset in the node will be used to 
point to the ETAG for this (static) document. ETAGS are used for 
cache-control in HTTP 1.1. (Note that an ETAG will not be used for a 
dynamic document) . 

The type field will indicate what type of header node it is - cache or 
state cookie, etc. 
The other fields are reserved. 

Note that in the future, we may use the last 32 bits in this header 
to be an instance C pointer for the cache control header. 



NOTE WELL: KEEP SIZEOF_EW$_DOCUMENT_NODE UP TO DATE! ! ! 
'/ 

typedef struct EwsDocumentNode_s 
I 

uint8 data_off set [4] ; /• location of node in uncompressed data 

stream (relative to start of uncompressed 
document data) , 

for COOKIE header it is an index to CookieTable 

•/ 

uintB type; /• type of node */ 

/• If you add a node type, update . ./compiler/readarchive.c •/ 

ft define EWJOCUMENTJJODEJTyP^STRING 1 /• <EMWEB_STRING> */ 

ft define EWJOCUMENT^NOD^TYPE^INCLUDE 2 /* <EMWEB_INCLUDE> •/ 

ft define EWjoaJMENTJJODEL.TYPELJ'ORM 3 /* <FORM> operation •/ 

ft define EW_DOCUMENTJlODEL.TyPELCGI 4 /♦CGI operation */ 

ft define EW_pOCUMEOT_NODE_TYP ELJCMAG EMAP 5 /* Image Map «/ 

ft define EW^DOCUMEmLNODBL-TYPZLCOOKIE 6 /♦ <EMWEB_COOKIE> »/ 

ft define EW_pOCUMENT^ODELTYPHL.CACHE 7 /* CACHE •/ 

ft define EW_POCUMENT_NODELTYP E_VAR Y 8 /• content negotiation*/ 

uint8 attributes; /• node attributes ♦/ 

/* If you add a node attribute, update ../compiler/readarchive.c •/ 
ft define EWJOCUMENT.J*ODELJ*EPEAT 0x01 /• repeat until NULL for 

EMW£B_STRING and 
EMWEB_INCLUDE nodes •/ 
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« define EW_DOCUMENT_KDK_SECURE 0x02 



uint8 



reserved [2] ; 



/* SECURE flag for cookie */ 
/♦ reserved for future use •/ 



uint8 index [4]; /* index assigned to node. This may be 

hierarchical, (e.g. the form index 
contains a form number and element 
number, the STRING index contains 
a conversion type (most significant 
8 bits} and a string number (least 
significant 24 bits) • 
The COOKIE index contains string number 
for cookie's value generating C-code. 
This index is applied to the switch contained 
in emweb_string() function */ 



) EwsDocumentNode, * EwsDocumentNodeP; 

tdefine SIZEOF_EWS_DOO&1ENT_JJODE 12 /♦ never use sizeof •/ 
ftdefine NEXT_DOCNODE ( x ) ( (EwsDocumentNodeP) ( ( (uint8 *)(x)) \ 

+ SIZEOF.EWS_DOCUMENT_NODE) ) 

*endif /• _EW_DB_H */ 
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/• 

* 91&: ew_£om.h f v 1.23 1997/06/28 11:59:50 ian Exp * 

« 

* Product: EmWeb 

* Release: $Name: $ 
* 

* %CqpyRight% 
# 

* EmWeb Fona definitions between server and generated code. These are 

* also used in typed EMWEB_STRlNGs, etc. 
* 

itifndef _EW_FORM_H 
#def ine _EW_FORHJi 

^include "ew.types.h" 
^include "ew_common.h n 
^include "ews_def.h" 



* Application Form Serve Function 

* Fills in form template with default values. (We comment out the prototype 

♦ to avoid compiler warnings — the actual application functions define 

• a specific form structure instead of void*). 
* 

• context - request context 

• form - pointer to form-specific structure 

• No return value 
•/ 

flifndef cplusplus 

typedef void EwaFormServe_f ( ) ; 
#else /• cplusplus ♦/ 

typedef void EwaFormServe_f ( EwsContext context, void * form ); 
#endif /• cplusplus •/ 

/* 

• Application Form Submit Function 

• Processes submitted form. (We comment out the prototype 

• to avoid compiler warnings — the actual application functions define 

* a specific form structure instead of void*). 
* 

. * context - request context 

* form - pointer to form-specific structure 
* 

• Returns NULL for default response to Berver (accepted) , or redirection URL, 
*/ 

tifndef cplusplus 

typedef char * EwaFormSubmit^f ( ) ; 
#else /• cplusplus */ 

typedef char • EwaFormSubmit^f ( EwsContext context, void * form ); 
ttendif /• cplusplus •/ 

/• 

♦ Form Field Types 

• Each field element has a type associated with it. Each type has conversion 

♦ routines to handle conversions between HTML and internal representations. 

* NOTE: if you modify this enum list, you MUST update the FieldMap in 

* file ewc_code.c!! 
•/ 

typedef enum EwFieldType_e 

ewFieldTypeDecimalOverride ■ 0 /* unsigned decimal integer •/ 
,ewFieldTypeRadio /* radio button - serve setup and submit */ 

iewFieldTypeRadioField /• radio fields - used in serving form */ 
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.ewFieldTypeSelect 
, ewFieldTypeSelectField 
,ewFieldTypeSelectMulti 
, ewFieldTypeCheckbox 
, ewFieldTypeText 
, ewFieldTypelmage 
, ewFi eldTypeDecimalUin t 
, ewFieldTypeDecimallnt 
, ewFieldTypeHexInt 
, ewFieldTypeHexString 
, ewFieldTypeDottedIP 
, ewFieldTypelEEEMAC 
, ewFieldTypeFDDlMAC 
, ewFieldTypeStdMAC 
, ewFieldTypeDecnetIV 
, ewFieldTypeFile 
, ewFieldTypeTextOverride 
, ewFieldTypeOb j ectID 
,ewFieldTypeMAX 
) EwFieldType; 



select enum - serve setup and submit •/ 

select enum fields - used in serving form */ 

multiple select */ 

checkbox •/ 

text field ♦/ 

image field •/ 

unsigned integer */ 

signed integer •/ 

hexadecimal integer */ 

hexadecimal string •/ 

dotted IP address */ 

IEEE MAC •/ 

FDD I MAC */ 

Standard MAC ♦/ 

Decnet IV Address */ 

input type file handle •/ 

serve input file name field */ 

object identifier */ 

MUST BE LAST •/ 



Form Field Representation 

The compiler generates the following structure for each element in the 
form. In general , a FORM document node is placed in the archive at the 
offset immediately following a VALUE- in TEXT, TEXTAREA, HIDDEN, or PASSWORD 
field. The field component of the form node index refers to a field 
structure as defined below. The' field type would be ewFieldTypeText, or 
one of the derivative extended types such as ewFieldToDottedlP. If a 
VALUE was specified in the source HTML, the compiler translates it into 
the appropriate internal representation and creates the def ault_value of 
the field. (For ewFieldTypeText, this is simply a pointer to the null 
terminated string. For other fields, this is a pointer to a value whose 
length is determined by the type in ewFieldTable) . The NAME* part of 
the field is saved, and the offset into the compiler-generated form for 
the value and status portions of the field is stored in value_offset and 
status_offset. 

Checkboxes and multiple selections are fairly straight forward. 

The type ewFieldCheckbox or ewFieldSelectMulti is used, and the 

node appears where the word "CHECKED" or "SELECTED" may appear. If a 

VALUE 0 is present, it is saved in the sel_value field. Otherwise, these 

types are identical to the extended text types above. 

Radio buttons and single-select boxes are more complex, with a single 
NAME-, there may be multiple VALUE- where only one applies to the actual 
value of the form field. With N radio buttons or single select options, 
the compiler generates n+1 field structures. One structure is used to 
read and write the value in the internal generated form. This would have 
type ewFieldTypeRadio or ewFieldTypeS elect, contain the default value, 
offsets into the form structure, and the field name. In addition, an array of 
integers containing all values corresponding to the generated enumerator is 
saved in enuitulist. The other N field structures. would represent each radio 
button or select option and have the type ewFieldTypeRadioField or 
ewFieldTypeSelectField. These are referenced by form nodes in the document 
archive at the location corresponding to where a "CHECKED" or "SELECTED" 
keyword would be inserted. They would not have a name field. Instead, , 
the enum_value field would be set to the value«= enumeration corresponding 
to the specific field. 



typedef struct EwForaiField_2 



I 



EwFieldType 
const void 
uintf 



fielcLtype; 

*default_value; 

value_offset; 



/• type of field */ 

/• pointer to default value •/ 

/• offset to value in form struct 
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status_offset; 
♦name; 
♦enunulist; 
enumjvalue; 
♦sel_value; 
EwFormFieldP; 



/• offset to status in form struc: 

/* name of field from NAME* 3 " " */ 

/• list of field values by enum •/ 

/* SELECT/RADIO value of field •/ 

/• SELECT multiple value field •/ 



Form Representation 

The following structure represents an HTML form. This points to the 
application-provided serve and submit functions, indicates the size 
of the compiler-generated form structure, and points to a table of 
field structures as defined above. 



typed ef struct EwFormEntry_s 



EwaFormS erve_f 
EwaFormSubmi t_f 
uintf 
uintf 

const EwFormField 



*serve_f ; 
•submit^f ; 
fontL-Size; 
f ield_count; 
*field_list; 



/• 
/• 
/• 



} EwFormEntry, • EwFormEntryP; 



application serve function * 
application submit function 
sizeof form structure */ 
number of fields in form */ 
list of fields •/ 



* Document Node Conversion Macros 

* These macros convert between the 32-bit node index and a form and element 

* index. 
•/ 

•define EW_FORM_ELEMENT_START 
•define EW_FORMLELEMENT_END 
#def ine EW_F0RhU*0DE_INDEXjrO_FORhLINDEX ( i ) 
#def ine EW_FOR>UJODE_INDEX_TO_ELEMENT_INDEX ( i ) 

•define ew_form_element_to_NODE_index ( f , e) ({(f) « 16) | (e)) 



(0) 

(Oxffff) 
<<i) » 16) 
((i) & Oxffff) 
(((f) « 16) i 



• Form conversion functions • 

• The "To" function converts to HTML ASCII format from the internal 

• representation and writes it directly to the output data stream, 

• The "From" function converts from HTML ASCII contained in a parsed network 

• buffer EwsString and converts it to the internal representation. 
•/ 

typedef void EwFieldTypeTo_f 

( EwsContext context, const EwFormField *field ); 
typedef void EwFieldTypeFronuf 

( EwsContext context, const EwFormField *field, EwsStringP stringp ); 
typedef void EwFieldTypeFree_f ( void *p ); 

•ifdef EW_C0NFI G_0PTI 0N_FI ELDTYF E_RAD 1 0 

extern EwFieldTypeTo_f ewFieldToRadioField; 

•endif /• EW_CONFIG_0PTI0NJFIELDTYPELRADIO •/ 

•if defined (EW_CONFIG_OPTION^FIELDTyPE_RADIO) \ 

1 1 defined (EW_CONFIG_0PTI0IlJ , IELDTVP£L.SELECnLSIKGLE) 
extern EwFieldTypeFronu* ewFieldFromRadio; 
•endif /♦ EW.CONFIGLOPTIONLFIELDTyP5_BADIO ) SELECT_£INGLE •/ 

•ifdef EWLC0NFIG_OPTI0N_FIELDTyPEL5ELECTjSINGLE 
extern EwFieldTypeTo_f ewFieldToSelectField; 
•endif /• EW_CONFIG_OPTI0N-FIELDTyPE_SELECT_SINGLE •/ 

•ifdef EW_CONFI G_OPTI ON_FI ELDTYP E_SELECT_MULTI PLE 
extern EwFieldTypeTojE ewFieldToSelectMul ti ; 

extern EwFieldTypeFronuf . ewFieldFroraSelectMulti; 
•endif /• EW_CONFIG_0PTI0*l_FIELDTYP5_SELECT.^LTIPLE •/ 
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flifdef EWLCONFIG_OPTION_FIELDTYPE^CKECKBOX 
extern EwFieldTypeTo_f ewFieldToCheckbox; 
extern EwFieldTypeFronuf ewFieldFromChecxbox; 
#endif /• EW_CONFIG_OPTIO*LJ'IELDTYPE_CHECKBOX */ 

Jlifdef EW_C0NFIG_0PTI0^FIELDTYPS_OiECKB0X 
extern EwFieldTypeTo.f ewFieldToText; 
extern EwFieldTypeFron_f ewFieldFroxnText; 
extern EwFieldTypeFree.f ewFieldFreeText; 
#endif /* EW_CONFIGLOPTIOlL-FIELDTVPEL.CHECKBOX * / 

extern EwFieldTypeTo_f ewFieldToDecimalUint; 

lUfdef EW_C0NFIG_0PTI0N_FIELDTYPE_IMAGE 

extern EwFieldTypeFronuf ewFieldFromlraage; 

*endif /• EW_CONFIG_OPTI0N_FIELDTYPE_IMAGE •/ 

*if defined ( EW_CONFI G_OPTI ON.FI ELDTYP E_D ECIMAL_UINT ) \ 
| | defined (EW_C0NFIG_OPTIOIJ_FIELDTyPE«DECIMAl^INT)\ 
| | defined <EW_CONFIG_pPTIOl_FIELDTYPE_IMAGE) 

extern EwFieIdTypeFrojr_f ewFieldFromDecimal ; 

#endif / • EW_CONFIG_OPTIOr_FIELDTYPE_DECIKJO_UINT | INT | IMAGE 

tfifdef E>_CONFIG_OPTION_FIELDTYPS_DECIMAI_lNT 
extern EwFieldTypeTo.f ewFieldToDecimallnt; 
#endif /• EW_CONFIG_OPTION.FIELDTYPE_DECIMAL.INT •/ 

#ifdef EWLCONFIG.OPTIOJ_FIELDTYPE_KEX_.INT 
extern EwFieldTypeTo_f evFieldToHexInt ; 

extern EwFieldTypeFrou_f ewFieldFromHexInt; 
#endif /• EW_CONFIG_OPTI0N_FIELDTYPE_HEX_INT •/ 

*ifdef EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING 
extern EwFieldTypeTo.f ewFieldToHexString; 
extern EwFieldTypeFron_f ewFieldFromHexString; 
extern EwFieldTypeFree_f ewFieldFreeHexString; 
#endif /* EW_CONFIG_OPTI0*_FI ELDTYP E_HEX_STRING •/ 

Jtifdef EV_C0NFI G.OPTI 0N_FI E LDTYPE_DOTTED IP 
extern EwFieldTypeTo_f ewFieldToDottedlP; 
extern EwFieldTypeFron_f ewFieldFromDottedlP; 
flendif /* EW_CONFI G_0PTI0N_FI ELDTYPE_DOTTEDI P •/ 

flifdef EW_CONFIG.OPTIOI^_FIELDTYPE_DECNET_IV 
extern EwFieidTypeTo_f ewFieldToDecnetlV; 
extern EwFieldTypeFron_f ewFieldFromDecnetIV; 
#endif /• EW_C0NFIG.0PTI0N_FIELDTYPE_DECNET_IV •/ 

*if defined <EW_CONFIG_OPTIO^FIELDTYPE_IEEEu^CA 
| | defined (E>L-C0NFIGL0PTI01^IELDTYPELJDDI-WAC) \ 
|| defined (EW_CONFIGL0PTI0l_FIELDTYP£L-STD < _MAC) 

extern EwFieldTypeFr6n_f ewFieldFroxnMAC; 

*endif /• EW_CX)NFIQ_OPTION_FIELDTYPE_IEEE |FDDI | STD.MAC •/ 

#if defined (EVCC0NFIGL0PTI0N^IEUJTYPLIEEILJ1AC)\ 

1 1 defined (EW_CONFIG_OPTIOIL^IEI^>TYPELSTD_MAC) 
extern EwFieldTypeTo_f e wF i el dToI EEEMAC ; 

*endif /• EW_C0NFI Q_0PTI ON—FI ELDTYP EEE | STD_MAC */ 

*if def EW_C0NFIG_0PTI0H.FIELDTYP5.FDDI.MAC 
extern EwFieldTypeTc_f ewFieldToFDDIMAC; 
*endif /• EW_CONFIG_OPTI0N_FIELDTYPE_FDDI_MAC •/ 

*ifdef EW_C0NFIG_0PTI0N_FIELDTYPELSTD^1AC 

extern EwFieldTypeFronu* ewFieldFromStdMAC; 
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#endif /• EW_CONFiq_OPTIOrCFIELDTYPEL.STD.JlAC •/ 

#ifdef EW_CONFIG_OPTIOH_F I ELDTYP EL-FILE 
extern BwFieldTypeFron\_f ewFieldFromFile; 
extern EwFieldTypeFree_f ewFieldFreeFile; 
#endif /♦ EW_CONFIG_OPTION_FIELDTyPE_FILE •/ 

flifdef EW_CONFI G_OPTIOIL-FI ELDTYPELO ID 
extern EwFieldTypeTCL.f ewFieldToObjectID; 
extern EwFieldTypeFronL-f ewFieldFromObjectID; 
extern EwFieldTypeFree_f ewFieldFreeObjectID; 
♦endif /* £W_C0NFIG_0PTI0*_FIELDTYPEL-OID ♦/ 



typedef struct EwFormFieldTable_s 



{ 

uintf 

EwFieldTypeTo_f 
EwFieldTypeFrouuf 
EwFieldTypeFree_f 
) EwFormFieldTable; 



field_size; 
•tc_f ; 
*fron_f ,• 
•free_f ; 



/• size of field •/ 

/• convert to HTML •/ 

/* convert from HTML •/ 

/* free dynamic pointer •/ 



*ifdef EWJDEFINE_FIELD_TYPE_TABLE 

const EwFormFieldTable ewFonnFieldTable [] 



{ 



{ sizeof (uint32) , ewFieldToDecimalUint , NULL, 



ifdef EW_C0NFIG_OPTIOl^FIELDTYPE_RADI0 

, { sizeof (int), NULL, 

, { o, ewFieldToRadioField, 

else /* EW_CONFIG_OPTION_FIELDTYPE_RADIO •/ 

A 0, NULL, 

,{ 0, NULL, 

endif /• EW_CONF I G_OP TI ON_FI ELDTYP E_RAD I O */ 



ewFi e 1 dFromRa di o , 
NULL, 

NULL, 
NULL, 



# ifdef EW_CONFIG_OPTION_FIELDTYPE_SELECT_SINGLE 

, ( sizeof (int) , NULL, ewFieldFromRadio, 
, { 0, ewFieldToSelectField, NULL, 

# else /♦ EW_CONFIG_OPTION_FIELDTYPE_SELECT_SINGLE •/ 
, { 0, NULL, NULL, 
, I 0, NULL, NULL, 
endif /• EWLCONFIG_OPTION_FI ELDTYP ELS £LECT_S INGLE •/ 



NULL ] 



NULL ] 
NULL ) 

NULL ) 
NULL ) 



NULL ] 
NULL ] 

NULL } 
NULL } 



i f def EW_CONFIG_OPTI ON_FI ELDTYP E_S ELECT_MULTI PLE 

, { sizeof (boolean) , ewFieldToSelectMulti, ewFieldFromSelectMulti,NULL ) 
else /• EW CONFIGLOPTION_FIELDTYPB_SELECT_MULTIPLE */ 

, { 0, NULL, NULL, NULL ) 

endif /• EW CONFIGLOPTION_FIELDTYPS-SELECT_MULTIPLE ♦/ 



ifdef EW_CONFIGLOPTION«FIELDTYPEL.CHECKBOX 

, ( sizeof (boolean) / e'wFieldToChecxbox, ewFieldFromCheckbox, NULL ) 

# else /♦ EW_CONFIG_OPTIO!CFIELDTYPEL.CHECKBOX •/ 

, { 0, NULL, NULLv NULL ) 

# endif /♦ EWLCONFIG_OPTION_FIBLDTYPELCHECKBOX •/ 

# ifdef EW_C0NFIG_0PTI0ILJ'1ELDTYPELTEXT 

,1 sizeof (char *), ewFieldToText, ewFieldFromText.ewFieldFreeText ) 

t else /• EVCCONFIG_OPTIOIi.FIELDTYPEL.TEXT •/ 

AO, ^ NULL, NULL, NULL } 

# endif /• EW_C0NFI G_OPT ION_FIELDTYP EL-TEXT •/ 

« ifdef EW_C0NFIG_0PTIOICFIELDTYPEL.IMAGE 

, I sizeof (uint32), NULL, ewFieldFromDecixnal, NULL) 

« else /• EW_CONFI G_OPTI OIL.FI ELDTYP EL-IMAGE •/ 

, ( 0, ~ NULL, NULL, NULL ) 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



-179- 

ew_foro.h Sat Jun 28 07:59:50 1997 6 

# endif /• EWLCONFIG_OPTIOrCFIELDTyPE_IMAGE •/ 

# ifdef EW_CONFIG_OPTI01LJTELDTYPELDECIMAL_UIOT 

# { sizeof (uint32) , ewFieldTqDecimalUint, ewFieldFroJnDecimal, NULL ) 

# else /* EW_CONFIG_OPTI0N_FIELDTYPE_DECIMAL_UINT */ 

, { 0, NULL, NULL, NULL ) 

# endif /* EW_CONFIG_OPTION_FI£LDTYPE_DECIMAL_UINT •/ 

# ifdef EW_CONFIG_OPTIOrL-FIELDTyPE_PECIMAL_INT 

, ( sizeof (uint32), ewFieldToDecimallnt, ewFieldFromDeciaal , NULL ) 

# else /• EW_C0NF I G_OPT I 0^i_FI ELDTYP ELD E CI MAL_INT •/ 

.10, NULL, NULL, NULL ) 

# endif /• EVL.CONFI G_OPT I OK_Fl ELDTYP ELDE C IMAL_INT •/ 

# ifdef EW_CONFIG_OPTIO!L-FIELDTYPE_HEX_INT 

,{ sizeof (uint32), ewFieldToHexlnt, ewFieldFromHexlnt, NULL J 

# else /* EW_CONFIG_OPTION_FI£LDTYPELHEX_INT */ 

, { 0, NULL, NULL, NULL } 

# endif /* EW_COOTIG_OPTION_FIELDTYPE_HEX_INT */ 

# ifdef EW_CONFIG_OPTI01L-FIELDTYPELHEJL-STRING 

,{ sizeof (EwsForroFieldHexString), ewFieldToHexString, ewFieldFromHexString, 
ewFieldFreeHexString } 

# else /• EW_CONFIG„OPTION_FIELDTYPE_HEX_STRING •/ 

, { 0, NULL, NULL, NULL ) 

# endif /♦ EW_CONFIGLOPTIONLFlELDlTPELHEX_STRING •/ 

# ifdef EW_CONFIG_OPTIOIL.riELDTyPELPOTTEDIP 

,{ sizeof (uint32) , ewFieldToDottedlP, ewFieldFromDottedlP, NULL } 

# else /* EW_CONFIG_OPTIOrL_FIELDTYPE_DOTTEDIP •/ 

, t 0, NULL, NULL, NULL ) 

# endif /• EW_CONFIGJ3PTIOlL-FI£I-DTYPE_DOTTEDIP •/ 

# ifdef EW_CONFIG_OPTIOIO , IELDTYPELIEEELMAC 

, { 6, ewFieldToIEEEMAC, ewFieldFroriMAC, NULL } 

« else /* EW_CONFIG_OPTIOICFIELDTyPE_IEEE_MAC */ 

, ( 0, NULL, NULL, NULL ] 

# endif /♦ EW_CONFIG_OPTION_FIELDTYPE__IEEELHAC */ 

# ifdef EW_CONFIG_OPTION_FIELDTYPELFDDI_JiAC 

, [ 6, ewFi e ldToFDDIMAC , ewFieldFromMAC, NULL } 

« else /• EW_CONFIGLOPTION_FIELDTYPE_FDDI_MAC */ 

, { 0, NULL, NULL, NULL ) 

# endif /* EW_CONFIG_OPTI01CFIELDTYPE_FDDI__MAC */ 

# ifdef EW_COOTIG_OPTIOKJFIELDTYPEu.STp.J4AC 

,{6, ewFieldToIEEEMAC, ewFieldFroaStdMAC, NULL) 

#. else /• EW_CONFIG_OPTI01L_FIELDTYP5_STD_>lAC •/ 

, { 0, NULL, NULL, . NULL ) 

# endif /* EW_CONFIG_OPTIOrCFIELDTyPELSTD_MAC »/ 



* ifdef EW.CONFIG_OPTION_FIELDTyPELPECNET_IV 

, { sizeof (uintU), ewFieldToDecnetlv, ewFieldFroabecnetrv, NULL J 

* else /* EW_CONFIGLOPTIO^FIELDTyPEUDEaJET_IV •/ 

, ( 0, NULL, NULL, NULL ) 

* endif /* EW^CONFIG_OPTIOI^FIELDTYPJLPECNET_IV */ 

* ifdef EW_CONFIG_OPTIOrL.FIELDTYPE_.FILE 

,( sizeof (EwaFileH&ndle} , NULL, ewFieldFromFile,ewFieldFreeFile ) 

, { sizeof (char *), ewFieldToText, ewFieldFromText,ewFieldFreeText } 

* else /* ! EW_CONFIG_OPTION_FI ELDTYP E^FILE •/ 

, { 0, NULL, NULL, NULL J 

, { 0, NULL, NULL, NULL ) 

* endif /• ewlconfig_option_.fieldtypel.file */ 
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ft ifdef EW_CONFIG_OPTIOIi.riELDTYPEL.OID 

, { si2eof (EwsFormFieldObjectlD) , ewFieldToObjectID, ewFieldFromObjectlD, 
ewFieldFreeObjectID } 
ft else /* EW_CONFIGJOPTIOI_FIELDTYPE_OID »/ 

, { 0, NULL, NULL/ NULL ) 

ft endif /• EW_CONFIG_OPTION_FIELDTYPS_0ID */ 

); 

ftelse /• EWLDEFINJL-FOWU , IELD_TYPE_TABLE ♦/ 
extern const EwFormFieldTable ewForaFieldTable [) ; 
ftendif /• EW_DEFINE_FORJ^FIEU)JYP5jrABLE */ 

ftendif /* _EW_FOW*_H */ 
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/• 

* lid: ew_imap.h,v 1.7 1997/05/21 21:55:48 ian Exp $ 

* Product: BtnWeb 

* Release: $Najne: $ 

* %CopyRight% 

* EmWeb image map definitions between server and generated code 
V 

tfifndef _EW_IMAP_H 
#define _ew_imaf.JJ 

^include "ew_types .h" 

typedef struct EwlmageMap_s 

uint32 ul_x ? /• upper-left X coordinate ♦/ 

uint32 ul_y ; /* upper-left Y coordinate ♦/ 

uint32 lr_x; /» lower-right X coordinate */ 

uant32 lr_y ; /* lower-right V coordinate •/ 

const char •url; /• relative redirection URL */ 

} EwImageMap, * EwlraageMapP; 

typedef struct EwimageMapTable_s 

const EwimageMap •map_table; /• table of map entries •/ 
uintf map_entries; /* size of map_table •/ 

const char •default.url; /* default URL, or NULL if not specified •/ 
J EwImageMapTable, • BwimageMapTableP; specified •/ 

*endif /• _EW_IMAP__H •/ 
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What is claimed is: 

1 . A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

including at a location in the document a code tag containing a segment of application 
source code; 

serving the text document to a client which interprets the mark-up language; and 
when the location is encountered, serving to the client a sequence of characters derived 

from a result of executing a sequence of instructions represented by the segment of application 

source code. 

2. The method of claim 1 , further comprising the step of: 

including in the document at least one more code tag containing a segment of application 
source code. 

3. The method of claim 1 , wherein the step of defining further comprises the step of: 
providing a plurality of documents which collectively define the graphical user interface; 

and 

storing the text document and the plurality of documents as files in a directory tree. 

4. The method of claim 3, further comprising the steps of: 

compiling the directory tree and the files therein into an archive including content 
sources; and 

decompiling a content source back into the text document before the step of serving. 

5. A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 
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including in the document a string identified by prototype tags; 

serving the text document to a prototyping client which interprets the mark-up language 
but does not recognize and does not display the prototype tags, but does display the string; and 

compiling the text document into a content source, omitting the prototype tags and the 
string identified thereby. 

6. The method of claim 5, further comprising the step of: 

including at a location in the document a code tag containing a segment of application 
source code, wherein the prototyping client does not recognize and does not display the code tag; 
and 

the step of further comprising including the segment of application source code in the 
content source. 

7. The method of claim 6, further comprising the steps of: 
decompiling the content source into a replica of the text document; 
serving the replica to a user client; and 

when the location is encountered in the replica, serving to the user client a character 
stream derived from a result generated by executing the segment of application source code. 

8. The method of claim 7, further comprising the steps of: 

including in the document at least one more code tag containing a segment of application 
source code; and 

including in the document at least one more string identified by code tags. 

9. A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

including at a location in the document a code tag containing a segment of application 
source code; 

including in the document a string identified by prototype tags; 
compiling the text document into a content source; 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 PCT/US97/13817 

-184- 

decompiling the content source into a replica of the text document; 

serving the replica of the text document to a client which interprets the mark-up language; 

and 

when the location is encountered in the replica, serving to the client a character stream 
generated by executing the segment of application source code. 

1 0. The method of claim 9, further comprising the steps of: 

including in the document at least one more code tag containing a segment of application 
source code; and 

including in the document at least one more string identified by code tags. 

11. A software product recorded on a medium, the software product comprising a mark-up 
language compiler which can compile a mark-up language document into a data structure in a 
native application programming language, the compiler recognizing one or more code tags which 
designate included text as a segment of application source code to be saved in a file for 
compilation by a compiler of the native application programming language. 

12. A method for providing a graphical user interface having displayed forms for entry of 
data, comprising the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

naming in the document a data item requested of a user and used by an application 
written in a native application programming language; and 

compiling the text document into a content source including a data structure definition in 
the native application programming language for the named data item. 

1 3 . The method of claim 1 2, wherein the text document is viewed using a prototype client 
during development and is viewed using a user client during use, further comprising the steps of: 

naming the data item within a tag understood in the mark-up language for viewing by 
both the prototype client and the user client; and 
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including in the content source a definition of a function to provide a default value for the 
data item when the content source is served and a definition of a function to perform an 
application specific operation when the data item is returned by the user client. 

14. In a computer-based apparatus for developing a graphical user interface for an application, 
the apparatus including an editor which can manipulate a document written in a mark-up 
language and a viewer which can display a document written in the mark-up language, the 
apparatus further comprising: 

a mark-up language compiler which recognizes a code tag containing a source code 
fragment in a native application source code language, the code tag not otherwise part of the 
mark-up language, the compiler producing as an output a representation in the native application 
source code language of the document, including a copy of the source code fragment. 

1 5 . The apparatus of claim 14, wherein the mark-up lanjguage compiler further recognizes 
begin and end prototype tags not otherwise part of the mark-up language, the output 
representation omitting the begin and end prototype tags and all content appearing therebetween 
in the document. 

1 6. A method for developing and prototyping graphic user interfaces for an application 
comprising the steps of: 

accessing an HTML file, 

encapsulating portions of said HTML and entering source code therein, 
producing a source module from said HTML with encapsulated portions, 
producing source code for a server, and 

cross compiling and linking said application, said source code module and said server 
thereby producing executable object code. 

1 7. The method of claim 1 6, further comprising the steps of: 
running said object code, 

executing said compiled encapsulated code when requested by a viewer, wherein said 
encapsulated code is associated with said application. 
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1 8. The method of claim 1 7, further comprising the steps of: 

converting data returned by execution of said compiled encapsulated code into a form 
displayable by said viewer. 

19. The method of claim 1 8, wherein the data returned by executing said compiled 
encapsulated code changes over time as a result of changes within the application. 

20. A data structure fixed in a computer readable medium, the data structure for use in a 
computer system including a client and a server in communication with each other, the data 
structure comprising: 

cross-compiled, stored and linked, HTML files with encapsulated portions containing 
executable code associated with said application, server code, and application code, wherein said 
executable code is run when the HTML file is served thereby providing real time dynamic data 
associated with said application. 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



1/15 



SOURCE DIRECTORY TREE 
113 




A 

HTML, Java, text, graphics 



111 




EmWeb Archive 
{Fixed Data) 
ew_data.dat 

I 

ew data.c 



EmWeb Archive 
(Object Code) 



ew code.c 



109 



Application-Specific 
ew_proto.h 
evvstubs.c 



SAN developer 




Application-Specific 



*.c 




103 



Fig. 1 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/138I7 



2/15 



EmWeb Archive fcJ; 




TCP/IP 
PROTOCa 
STACK 



DEVICE 

CONFIGURATION 
AND 

STATISTICS 



NETWORK ACCESS 



Fig. 2 



SUBSTITUTE SHEET (RULE 26) 



WO98/0d033 



PCMJS97/13817 



3/15 



o 

CO 



o 

CO 



CO 

o 

CO 



7] 



V. 



II 

o f-. 

CD <D 

S 6 

H Id 

CO *J 

I <d 

n 4J 

w CO 



w 

v 



(0 



A ^ B 

v & cs 

v a -h 

•• n »H ► 

© "d ft s 

-P O © © 

flj O <D O H 

*J CO © «d 



© 



H 
s 



© 

■P 
(0 
■P 

to 
X 

RJ 
fa 
rH 

id 
<Q 
O 
H 



§ 

S3 
© 

id 

to 

H 
© 



o 

CO 



A 

o 

£* 
O 
P* 
Pi 



W 

•v. 

^ v 
tn 

a 

■rt 

•d 
© 

CO 

- A 

o 

O 
« 



CO 



i 

n 
w 

i a 

V V 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



4/15 



II 




> d) 

LL 



A 



SUBSTITUTE SHEET (RULE 26) 



PCT/US97/13817 



5/15 




SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



6/15 



o 

CD 



•a 

<D 

© 

w 
C 

•rl 



© 
© 
fa 
O 
O 
<M 



- © 

II H 

U A 
(0 

W EH 

Q © 

D H 

Hi ^ 

U 4J 

a © 

H © 

I fa 

m 

w ^ 



6 

o 
o 



CD 



© 

•4 



a 
© 



© 



CD 
LL 



•J 
S5 

c 
n 

© 
n 



w 

v 



SUBSTITUTE SHEET (RULE 2S) 



WO 98/06033 



PC17US97/13817 



7/15 


















i-H 






rH 


















1 






(3 






A) 
w 






o 






u 






<D 






a 






i 






CO 






u 






4-> 




mm 

A 








s 






rH 




V 


i—l 












<j-i 






vO 










b> 






V 


A 




A 


-H 




-H 


rH 




iH 


V 




V 


s 




B 














H 




M 


a> 




<D 






«H 


«H 




«M 
























£ 


4J 


H 






0) 


0 


-H 


<H 


M 


H 


>W 


-P 


a 




(0 


CO 


5 



> CD 
LL 



tQ 
H 

a) 



g 

■p 

0) 
H 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



8/15 



4J 

X 
<D 

g 

CO 

i 




•0 
® 
H 
H 

nj 

CO 

a 

•rl 



0) 

n 

<D 



<D 
U 

ft 



■3 

-■ Eh 
0 0 



Eh 



H 



0 

■rl 
4J 

rl 

<D 
4J 



a) 

g 

•rl 

o 

O 

& 



4J 

in £ 

O 
D 

O 

a 



0) o 
H fa 



0 

CO 

fa 



•rl 



a 
n 

M 



ft 
U 

CP ® 

a u 

H 



o 

00 



O 
•rl 
4J 

0) 
■P 
•H 

& 

CD 



g 

U 

o 
a 



s 



3 

CO n 



00 



o 

00 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCTAJS97/13817 



9/15 



05 1 



° 



8 



2 



CO 




ill 



SS 53 53 2 

O O O O 

H M H H 

H H ^ h H 

O Pi Pi Pi Pi 

W O O O O A 

v v v v E* 



v v 



CO 
Q) 

CO 
k_ 

0) 

c 

O) 

c 

CO 




nJ rt «J jj 4J 4J 

-a i* > -m a a co 



4J 



4J 
CO 



5) 



JJ 
CO 



0 

CO 
0) 

o 

3 
T3 
O 



ri> 



c 
o 

E -a 
« — 

a> O 

X X 



c 
O 

C 

E 

o 
o 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



10/15 



ARCHIVE HEADER 



ENTRY POINTS- 



COMPRESSION 
DICTIONARY 



1003 



1001b 
1011- 



URL 



1013- 



MIME TYPE 



HEADER NODES 



1015-x 



1017b- 
1017c- 









DOCUMENT NODES 


OFFSET 


• • • 


TYPE 


INDEX 



1017 



1001 



-1001a 



r 



1005 



DOCUMENT HEADER 



DATA 

(COMPRESSED 
OR 

UNCOMPRESSED} 



-1005a 

-1005b 
-1005c 

-1005d 



-1005e 



-1019 



DOCUMENT HEADER 



DOCUMENT HEADER 




1007 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



11/15 



c 
o 

"5 

u 

"o. 

CL 

< 



CO 



I 

CD 
CO 
\ 
-Q 



A 

o 
z 

\— 

in 

I 

GO 
LU 

UJ 

V 



D 
Q 
u 

E 

D 
C 

>- 

Q 



CD O. 

to 

I • 

00 



o 
o 



i, 






\co 
v o 






o 




o 




o 

CM 


o 




B 




o 




u 




B 


I 









O) 



CO 



U) 

•9 



o 

Q 
u 

E 
o 

' c 
>. 

a 



D 
Q 

B 

OS 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



12/15 



c 
o 

o 

u 

"q. 

Q. 
< 



CD 

CO 

o 

CN 



CO 
CN 



CO 



8\ 



Q) 

E 



CO 

o 

CO 



0 
> 

0 
CO 

E 



0) 



C/) 

a> 

O 
> 

3 

D 



LO 

o 

CN 



E 

JO 

to 
E 



a) 



z> 

0) 
CO 

c 
o 

Ql 

CO 

a> 



S2 

CM 



Q. 



O 
O 



o 

CN 



O 
CM 



D 

O 
Q 

<D 

CO 

c 
o 

CL 
00 
<D 



t 

£ 

d 
o 



to 
O 



a> 
o 

CN 



in 



a 
o 

<D 
CO 

o 
a 

CO 

<D 



CN 

ri> 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



. 13/15 



c 
o 

D 

u 

Cl 
< 



n 
in 
o 

CO 



m 
o 

CO 




£ 

Q) 

\ 
-Q 
Q) 

E 



re 
in 

A 
O 



CO 



CO 



C 

Q) 

Q. 

c/> 

CO 
10 



0) 



0)i 

o 

col 



E 

c/) 
CD 

0) 



A 

o 

I— 

CO 

co 1 



o 

ID 

o 

CO 



D 
Q 



E 

D 

c 



52 



u v 



x 



o 
o 



0) 

CO 

I 

CD 




O 

o 
o 



a. 

1= 



V 



CO 

o 

CO 



in 



o 
B 

Q 

u 

E 
o 
c 
>» 
Q 



CO 
LL 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



14/15 




o 
2 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 




SUBSTITUTE SHEET (RULE 26) 



INTERNATIONAL SEARCH REPORT 



In ational Application No 

PU/US 97/13817 



A. CLASSIFICATION OF SUBJECT MATTER 

IPC 6 G06F9/44 



G06F17/30 



According to International Patent Classification (IPC) or to bom national classification and IPC 



B. FIELDS SEARCHED 



Minimum documentation searched {classification system followed by classification symbols) 

IPC 6 G06F 



Documentation searched other than minimum documentation to the extent that such documents are included in the fields 



Electronic data base consulted during the international search (name of data base and. where practical, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category • Citation of document, with indication, where appropriate, of the relevant 



Relevant to claim No. 



CRESPO A ET AL: "WebWriter: A 
browser-based editor for constructing Web 
applications" 

COMPUTER NETWORKS AND ISDN SYSTEMS, 

vol. 28, no. 11, May 1996, 

page 1291-130* XP004018228 

see page 1393, left-hand column, line 32 - 

right-hand column, line 35 

see page 1296, left-hand column, line 46 - 

page 1297, right-hand column, line 11 

see page 1302, right-hand column, line 10 

- page 1303, left-hand column, last line 

-/-- 



1-20 



| X| Furt " er documents an listed in the continuation ol box C. 



□ 



Patent family membere are listed m annex. 



* Special categories of cited documents : 

■A" document defining the gonerai state of the art which is not 
considered to be of particular relevance 

"E" earlier document but published on or after the international 
filing date 

V document which may throw doubts on priority claim(e) or 
which is cited to establish the publication date of another 
citation or other special reason (as specified) 

"O" document referring to an oral disclosure, use. exhibition or 
other means 

V" document published prior to the international filing dale but 
later than the priority date claimed 



T" later document published after the international filing date 
or priority date and not in conflict with Ihe application but 
cited to understand the principle or theory underlying the 
invention 

*X" document of particular relevance; the claimed invention 
cannot be considered novel or cannoi be considered to 
involve an inventive step when the document is taken alone 

"Y* document of particular relevance: the claimed invention 

cannoi be considered to involve an inventive step when the 
document is combined with one or more other such docu- 
ments, such combination being obvious to a person skilled 
in the art. 

"A" document member of the same patent family 



Date of the actual completion of Iheintemational search 



11 December 1997 



Date of mailing of the international search report 

30/12/1997 



Name and mailing address ol the ISA 

European Patent Office. P.B. 5818 Paientlaan 2 
NL - 2280 HV Rijswijk 
Tel. {+31-70)340-2040. Tx. 31 651 eponl. 
Fax: (+31-70)340-3016 



Authorized officer 



Fonderson, A 



Form PCT/1SA/2 1 0 <a*oond thfsl) (Jury 1992) 



page 1 of 2 



INTERNATIONAL SEARCH REPORT 



Intf " itional Application No 

Pi,, /US 97/13817 



C(Contlnuation) DOCUMENTS CONSIDERED TO BE RELEVANT 


Category ' 


Citation o< document, whh indication .where appropriate, of the relevant passages 


Relevant to claim No. 



D. A. LADD AND J. C. RAMMING: 
''Programming the Web: An . 
Application-Oriented Language for 
Hypermedia Service Programming" 
PROCEEDINGS OF THE 4TH INTERNATIONAL WORLD 
WIDE WEB CONFERENCE, 
December 1995, BOSTON, MA, USA, 
XP002049893 

( http : //www . w3 . org/pub/Conf erences/WWW4/P a 

pers/251/) 

see abstract 

see page 2, line 3 - line 8 

see page 10, line 51 - page 16, last line 



1-20 



3 



Form PCT/ISAO10 (cortmuation ol woond stiMt) (July 1 992) 



page 2 of 2 



